xoxys.certbot/defaults/main.yml

---
# @var certbot_version:description: Set a fix version of the certbot package to install.
# @var certbot_version: $ "_unset_"

# @var certbot_packages_extra:description: Extra packages to install with pip (e.g. DNS plugins).
certbot_packages_extra: []

certbot_virtualenv_command: /usr/bin/python3 -m venv
certbot_virtualenv: /opt/python3/certbot

certbot_user: root

certbot_work_dir: /var/lib/letsencrypt
certbot_config_dir: /etc/letsencrypt
certbot_log_dir: /var/log/letsencrypt

certbot_max_log_backups: 30

certbot_preferred_challenges: dns
certbot_server: https://acme-v02.api.letsencrypt.org/directory
certbot_email: mail@example.com
certbot_rsa_key_size: 4096
certbot_domain_groups:
  - name: example
    domains:
      - "*.example.com"
      - example.com
    init: False

# @var certbot_credentials:description: >
# Specify key value parairs for your credentials (e.g. plugin credentials).
# The credentials will be saved to `{{ certbot_config_dir }}/credentials.ini and you
# could add the path to `certbot_command_arguments` if required.
# @end
certbot_credentials: []

# @var certbot_bin:description: Location of the certbot binary. Default is to `~/.local/.bin/certbot`.
certbot_command_arguments:
  - "certonly"

# @var certbot_cron_enabled:description: Enable scheduling via cron.
certbot_cron_enabled: True

# @var certbot_cron_file:description: >
# Use a file under /etc/cron.d but this will only work if `certbot_user` has write permissions for this location.
# @end
# @var certbot_cron_file: $ "_unset_"
# @var certbot_cron_file:example: certbot-letsencrypt

certbot_cron_minute: "30"
certbot_cron_hour: "3"