ansible-collection-webserver/roles/apache2/defaults/main.yml

---

apache2_vhost_serveradmin: webmaster@localhost
apache2_vhost_serveraliases: []
apache2_vhost_documentroot: /var/www/html
apache2_vhost_documentroot_owner: www-data
apache2_vhost_documentroot_group: www-data
apache2_vhost_loglevel: warn
apache2_vhost_errorlog: "${APACHE_LOG_DIR}/error.log"
apache2_vhost_accesslog: "${APACHE_LOG_DIR}/access.log combined"

apache2_vhost_http_enabled: true
apache2_vhost_https_enabled: true
apache2_vhost_http_redirect_to_https: true

apache2_tls_certfile: "/etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem"
apache2_tls_keyfile: "/etc/letsencrypt/live/{{ inventory_hostname }}/privkey.pem"
apache2_tls_noacme_fallback_certfile: /etc/ssl/certs/ssl-cert-snakeoil.pem
apache2_tls_noacme_fallback_keyfile: /etc/ssl/private/ssl-cert-snakeoil.key
# generated 2024-08-10, Mozilla Guideline v5.7, Apache 2.4.61, OpenSSL 3.0.13, intermediate configuration, no OCSP
# https://ssl-config.mozilla.org/#server=apache&version=2.4.61&config=intermediate&openssl=3.0.13&ocsp=false&guideline=5.7
apache2_tls_protocols: "all -SSLv3 -TLSv1 -TLSv1.1"
apache2_tls_ciphersuite: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305"  # noqa yaml[line-length]
apache2_tls_honor_cipher_order: false
apache2_tls_session_tickets: false

apache2_module_packages: []
apache2_modules:
  - ssl
  - proxy_http
  - headers
  - rewrite

apache2_sites: {}