2022-02-26 04:19:44 +01:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
nginx_vhost_serveraliases: []
|
|
|
|
|
nginx_vhost_documentroot: /var/www/html
|
2022-03-01 00:28:44 +01:00
|
|
|
nginx_vhost_documentroot_owner: www-data
|
|
|
|
|
nginx_vhost_documentroot_group: www-data
|
2022-02-26 04:19:44 +01:00
|
|
|
|
|
|
|
|
nginx_vhost_http_enabled: true
|
|
|
|
|
nginx_vhost_https_enabled: true
|
|
|
|
|
nginx_vhost_http_redirect_to_https: true
|
|
|
|
|
|
|
|
|
|
nginx_tls_certfile: "/etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem"
|
|
|
|
|
nginx_tls_keyfile: "/etc/letsencrypt/live/{{ inventory_hostname }}/privkey.pem"
|
|
|
|
|
nginx_tls_noacme_fallback_certfile: /etc/ssl/certs/ssl-cert-snakeoil.pem
|
|
|
|
|
nginx_tls_noacme_fallback_keyfile: /etc/ssl/private/ssl-cert-snakeoil.key
|
|
|
|
|
|
|
|
|
|
# generated 2022-02-26, Mozilla Guideline v5.6, nginx 1.18.0, OpenSSL 1.1.1k, intermediate configuration, no OCSP
|
|
|
|
|
# https://ssl-config.mozilla.org/#server=nginx&version=1.18.0&config=intermediate&openssl=1.1.1k&ocsp=false&guideline=5.6
|
|
|
|
|
nginx_ssl_protocols: "TLSv1.2 TLSv1.3"
|
|
|
|
|
nginx_ssl_ciphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"
|
|
|
|
|
nginx_ssl_prefer_server_ciphers: false
|
|
|
|
|
nginx_ssl_session_tickets: false
|
|
|
|
|
|
|
|
|
|
nginx_modules: []
|
|
|
|
|
nginx_sites: {}
|
