Chris Hammer
3f43c1575f
--------------------------
* MODIFY:
- update certs for lets encrypt renewal
* ADD:
- add bitwarden site
- add unifi site
- added support for web sockets globally
33 lines
1.1 KiB
YAML
33 lines
1.1 KiB
YAML
---
|
|
proxy_package_list : ['nginx','aptitude','git']
|
|
proxy_site_conf_dir : /etc/nginx/conf.d
|
|
proxy_site_file : "{{ proxy_site_conf_dir }}/zen_proxy.conf"
|
|
proxy_site_version : 1.8
|
|
proxy_site_revision : 20200113-141420
|
|
|
|
|
|
proxy_site_log_path : /proxy_logs
|
|
proxy_site_access_log : "{{ proxy_site_log_path }}/zen_proxy.log"
|
|
|
|
|
|
proxy_site_ssl_directory : /etc/nginx/ssl
|
|
proxy_site_ssl_certificate : "{{ proxy_site_ssl_directory }}/thezengarden.net/fullchain6.pem"
|
|
proxy_site_ssl_certificate_key : "{{ proxy_site_ssl_directory }}/thezengarden.net/privkey6.pem"
|
|
proxy_site_ssl_protocols : TLSv1.2
|
|
proxy_site_ssl_ciphers : ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256
|
|
|
|
|
|
# many websites are run from our apache host
|
|
# ...lets define it here to make things easier
|
|
proxy_default_host : zg-lxwb04.thezengarden.net
|
|
|
|
|
|
# some of our sites require uploads, and those uploads
|
|
# can be rather large; lets set a default max upload size:
|
|
proxy_default_max_upload: 512M
|
|
|
|
|
|
# git repo vars for ssl certs
|
|
ssl_repo : git@gitlab.thezengarden.net:zen/le-ssl-certs.git
|
|
ssl_repo_branch : master
|