ansible/roles/prosody/defaults/main.yml

22 lines
593 B
YAML

---
prosody_domain: "jabber.ccchb.de"
prosody_ssl_cert: "/etc/letsencrypt/live/{{ prosody_domain }}/fullchain.pem"
prosody_ssl_key: "/etc/letsencrypt/live/{{ prosody_domain }}/privkey.pem"
prosody_allow_registration: false
prosody_nginx_install: true
prosody_nginx_conf: |
listen [::]:443 ssl http2;
listen 443 ssl http2;
server_name {{ prosody_domain }};
root /var/www/html;
ssl_certificate {{ prosody_ssl_cert }};
ssl_certificate_key {{ prosody_ssl_key }};
ssl_trusted_certificate /etc/letsencrypt/live/{{ prosody_domain }}/chain.pem;
include snippets/certbot.conf;
...