---
# roles/nginx/defaults/main.yml

nginx_conf_dir: /etc/nginx/http.d          # Alpine nginx include dir
nginx_well_known_root: /var/www            # served for ACME HTTP-01 challenges
nginx_static_root: /srv/static             # thesis PDF lives here
nginx_proxy_pass: http://127.0.0.1:3000    # the api container
nginx_cert_dir: /etc/ssl/uacme
nginx_acme_wrapper: /usr/local/bin/acme-update-certs

# VictoriaLogs UI (vmui), proxied at https://<host>/logs/ behind basic auth
# Must match -http.pathPrefix on the victorialogs service
nginx_logs_proxy_pass: http://127.0.0.1:9428
nginx_logs_htpasswd_file: /etc/nginx/.htpasswd-logs
# CHANGE ME: a "user:hash" line, e.g. from `openssl passwd -apr1`
# The default is the throwaway "logs" user with password "nexo-logs"
nginx_logs_htpasswd: "logs:$apr1$Bb2qaSgH$TUfwUmDTRR/FpOLRu.Jnj/"