50 lines
1.7 KiB
YAML
50 lines
1.7 KiB
YAML
---
|
|
common__certbot__conf_dir: '/etc/letsencrypt'
|
|
common__certbot__conf_cli: '{{ common__certbot__conf_dir }}/cli.ini'
|
|
common__certbot__conf_nginx: '{{ common__certbot__conf_dir }}/options-ssl-nginx.conf'
|
|
|
|
common__iptables__conf_dir: '/etc/iptables'
|
|
common__iptables__conf_ipv4: '{{ common__iptables__conf_dir }}/rules.v4'
|
|
common__iptables__conf_ipv6: '{{ common__iptables__conf_dir }}/rules.v6'
|
|
|
|
common__nginx__conf_dir: '/etc/nginx'
|
|
common__nginx__confd_dir: '{{ common__nginx__conf_dir }}/conf.d'
|
|
common__nginx__available_dir: '{{ common__nginx__conf_dir }}/sites-available'
|
|
common__nginx__enabled_dir: '{{ common__nginx__conf_dir }}/sites-enabled'
|
|
|
|
common__apache__conf_dir: '/etc/apache2'
|
|
common__apache__available_dir: '{{ common__apache__conf_dir }}/sites-available'
|
|
common__apache__enabled_dir: '{{ common__apache__conf_dir }}/sites-enabled'
|
|
|
|
common__certbot__nginx_ssl_ciphers:
|
|
- 'ECDHE-ECDSA-CHACHA20-POLY1305'
|
|
- 'ECDHE-RSA-CHACHA20-POLY1305'
|
|
- 'ECDHE-ECDSA-AES128-GCM-SHA256'
|
|
- 'ECDHE-RSA-AES128-GCM-SHA256'
|
|
- 'ECDHE-ECDSA-AES256-GCM-SHA384'
|
|
- 'ECDHE-RSA-AES256-GCM-SHA384'
|
|
- 'DHE-RSA-AES128-GCM-SHA256'
|
|
- 'DHE-RSA-AES256-GCM-SHA384'
|
|
- 'ECDHE-ECDSA-AES128-SHA256'
|
|
- 'ECDHE-RSA-AES128-SHA256'
|
|
- 'ECDHE-ECDSA-AES128-SHA'
|
|
- 'ECDHE-RSA-AES256-SHA384'
|
|
- 'ECDHE-RSA-AES128-SHA'
|
|
- 'ECDHE-ECDSA-AES256-SHA384'
|
|
- 'ECDHE-ECDSA-AES256-SHA'
|
|
- 'ECDHE-RSA-AES256-SHA'
|
|
- 'DHE-RSA-AES128-SHA256'
|
|
- 'DHE-RSA-AES128-SHA'
|
|
- 'DHE-RSA-AES256-SHA256'
|
|
- 'DHE-RSA-AES256-SHA'
|
|
- 'ECDHE-ECDSA-DES-CBC3-SHA'
|
|
- 'ECDHE-RSA-DES-CBC3-SHA'
|
|
- 'EDH-RSA-DES-CBC3-SHA'
|
|
- 'AES128-GCM-SHA256'
|
|
- 'AES256-GCM-SHA384'
|
|
- 'AES128-SHA256'
|
|
- 'AES256-SHA256'
|
|
- 'AES128-SHA'
|
|
- 'AES256-SHA'
|
|
- 'DES-CBC3-SHA'
|
|
- '!DSS'
|