ansible-collection-webserver/roles/apache2/defaults/main.yml

32 lines
1.4 KiB
YAML
Raw Normal View History

2021-04-26 00:07:37 +02:00
---
apache2_vhost_serveradmin: webmaster@localhost
2021-04-26 00:07:37 +02:00
apache2_vhost_serveraliases: []
apache2_vhost_documentroot: /var/www/html
apache2_vhost_loglevel: warn
apache2_vhost_errorlog: "${APACHE_LOG_DIR}/error.log"
apache2_vhost_accesslog: "${APACHE_LOG_DIR}/access.log combined"
apache2_vhost_http_enabled: true
apache2_vhost_https_enabled: true
apache2_vhost_http_redirect_to_https: true
apache2_tls_certfile: "/etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem"
apache2_tls_keyfile: "/etc/letsencrypt/live/{{ inventory_hostname }}/privkey.pem"
apache2_tls_noacme_fallback_certfile: /etc/ssl/certs/ssl-cert-snakeoil.pem
apache2_tls_noacme_fallback_keyfile: /etc/ssl/private/ssl-cert-snakeoil.key
# generated 2021-04-22, Mozilla Guideline v5.6, Apache 2.4.41, OpenSSL 1.1.1d, intermediate configuration, no OCSP
# https://ssl-config.mozilla.org/#server=apache&version=2.4.41&config=intermediate&openssl=1.1.1d&ocsp=false&guideline=5.6
apache2_tls_protocols: "all -SSLv3 -TLSv1 -TLSv1.1"
apache2_tls_ciphersuite: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"
apache2_tls_honor_cipher_order: false
apache2_tls_session_tickets: false
apache2_modules:
- ssl
- proxy_http
- headers
- rewrite
apache2_sites: {}