History

Julien Palard 429bb00525 nginx role: allow to choose certbot authenticator.		2022-10-23 11:24:31 +02:00
..
defaults	nginx role: allow to choose certbot authenticator.	2022-10-23 11:24:31 +02:00
handlers	certbot: Use DNS-01 instead of HTTP so it can work on other machines.	2021-09-10 14:12:50 +02:00
tasks	nginx role: allow to choose certbot authenticator.	2022-10-23 11:24:31 +02:00
templates	www.afpy.org migré.	2021-11-18 08:08:04 +01:00
README.md	www.afpy.org migré.	2021-11-18 08:08:04 +01:00

Nginx with Letsencrypt

This role sets up nginx with letsencrypt (using DNS-01 with Gandi API) .

Role Variables

The mandatory variables are:

admin_email: For letsencrypt.
gandi_api_key (see doc).
nginx_certificates: A list of domain to put in this certificate.
nginx_domain: Used for file names, certificate name, and default server_name if no nginx_conf is given.
nginx_conf: The nginx config.

Optional variables are:

nginx_owner: If a unix user has to be created for this project.
nginx_path: To create a directory owned by nginx_owner.
ssl_ciphers: Specifies the enabled ciphers.
ssl_protocols: Enables the specified protocols.
ssl_prefer_server_ciphers: Specifies that server ciphers should be preferred over client ciphers when using the SSLv3 and TLS protocols.
ssl_session_cache: Sets the types and sizes of caches that store session parameters..
HSTS_header: HTTP header to inject.

Julien Palard — https://mdk.fr