---

# roles/uacme/defaults/main.yml

# ACME certificate management (uacme)

# setup: everything runs as an unprivileged `acme` user

acme_user: acme

acme_group: acme

acme_web_group: nginx

acme_hook: /usr/share/uacme/uacme.sh

acme_cert_dir: /etc/ssl/uacme

acme_wrapper: /usr/local/bin/acme-update-certs