eletrotupi / tcc/ ansible/roles/nginx/defaults/main.yml390ce2952161e18712e999aba9eb762245263865
894 B | 17 lines Raw
1
---
2
# roles/nginx/defaults/main.yml
3
4
nginx_conf_dir: /etc/nginx/http.d          # Alpine nginx include dir
5
nginx_well_known_root: /var/www            # served for ACME HTTP-01 challenges
6
nginx_static_root: /srv/static             # thesis PDF lives here
7
nginx_proxy_pass: http://127.0.0.1:3000    # the api container
8
nginx_cert_dir: /etc/ssl/uacme
9
nginx_acme_wrapper: /usr/local/bin/acme-update-certs
10
11
# VictoriaLogs UI (vmui), proxied at https://<host>/logs/ behind basic auth
12
# Must match -http.pathPrefix on the victorialogs service
13
nginx_logs_proxy_pass: http://127.0.0.1:9428
14
nginx_logs_htpasswd_file: /etc/nginx/.htpasswd-logs
15
# "user:hash" line; the credential comes from the encrypted vault, with a
16
# throwaway fallback so the role still renders before the vault is imported
17
nginx_logs_htpasswd: "{{ vault_nginx_logs_htpasswd | default('logs:$apr1$Bb2qaSgH$TUfwUmDTRR/FpOLRu.Jnj/') }}"