---
  proxy_package_list  : ['nginx','aptitude','git']
  proxy_site_conf_dir : /etc/nginx/conf.d
  proxy_site_file     : "{{ proxy_site_conf_dir }}/zen_proxy.conf"
  proxy_site_version  : 1.8
  proxy_site_revision : 20200515-172338


  proxy_site_log_path   : /proxy_logs
  proxy_site_access_log : "{{ proxy_site_log_path }}/zen_proxy.log"


  proxy_site_ssl_directory       : /etc/nginx/ssl
  proxy_site_ssl_certificate     : "{{ proxy_site_ssl_directory }}/thezengarden.net/fullchain9.pem"
  proxy_site_ssl_certificate_key : "{{ proxy_site_ssl_directory }}/thezengarden.net/privkey9.pem"
  proxy_site_ssl_protocols       : TLSv1.2
  proxy_site_ssl_ciphers         : ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256


  # many websites are run from our apache host
  # ...lets define it here to make things easier
  proxy_default_host : zg-lxwb04.thezengarden.net


  # some of our sites require uploads, and those uploads
  # can be rather large; lets set a default max upload size:
  proxy_default_max_upload: 512M


  # git repo vars for ssl certs
  ssl_repo        : git@gitlab.thezengarden.net:zen/le-ssl-certs.git
  ssl_repo_branch : master