majic-ansible-roles Files · roles/web

Files @ ddcc0a5f7312

Branch filter:

Location: majic-ansible-roles/roles/web_server/defaults/main.yml

ddcc0a5f7312 605 B text/x-yaml Show Annotation Show as Raw Download as Raw

branko

MAR-162: Make the default_https_tls_certificate and default_https_tls_key parameters mandatory:

- Dropped the defaults from web_server role.
- Updated group variables in role tests.
- Changed the key/certificate file extensions to be more descriptive.
- Updated role reference documentation.
- Updated usage instructions to include the mandatory parameters.

---

default_enforce_https: true
web_default_title: "Welcome"
web_default_message: "You are attempting to access the web server using a wrong name or an IP address. Please check your URL."
web_server_tls_protocols:
  - "TLSv1.2"
web_server_tls_ciphers: "DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-GCM-SHA384:\
DHE-RSA-AES256-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-GCM-SHA384:\
ECDHE-RSA-AES256-SHA384:!aNULL:!MD5:!EXPORT"

# Internal parameters
php_fpm_package_name: "php-fpm"
php_fpm_service_name: "php7.0-fpm"
php_base_config_dir: "/etc/php/7.0"