---
common__certbot__group: 'letsencrypt'
common__certbot__conf_dir: '/etc/letsencrypt'
common__certbot__conf_cli: '{{ common__certbot__conf_dir }}/cli.ini'
common__certbot__conf_nginx: '{{ common__certbot__conf_dir }}/options-ssl-nginx.conf'
common__certbot__archive_dir: '{{ common__certbot__conf_dir }}/archive'
common__certbot__live_dir: '{{ common__certbot__conf_dir }}/live'

common__certbot__nginx_ssl_ciphers:
  - 'ECDHE-ECDSA-AES128-GCM-SHA256'
  - 'ECDHE-RSA-AES128-GCM-SHA256'
  - 'ECDHE-ECDSA-AES256-GCM-SHA384'
  - 'ECDHE-RSA-AES256-GCM-SHA384'
  - 'ECDHE-ECDSA-CHACHA20-POLY1305'
  - 'ECDHE-RSA-CHACHA20-POLY1305'
  - 'DHE-RSA-AES128-GCM-SHA256'
  - 'DHE-RSA-AES256-GCM-SHA384'