xoxys.certbot/defaults/main.yml

---
# @var certbot_packages_extra:description: Extra packages to install with pip (e.g. DNS plugins).
certbot_packages_extra: []

certbot_user: root
certbot_pip: "pip{{ ansible_python.version.major }}"

certbot_work_dir: /var/lib/letsencrypt
certbot_config_dir: /etc/letsencrypt
certbot_log_dir: /var/log/letsencrypt

certbot_preferred_challenges: dns
certbot_server: https://acme-v02.api.letsencrypt.org/directory
certbot_email: mail@example.com
certbot_rsa_key_size: 4096
certbot_domain_groups:
  - name: example
    domains:
      - "*.example.com"
      - example.com
    init: False

# @var certbot_credentials:description: >
# Specify key value parairs for your credentials (e.g. plugin credentials).
# The credentials will be saved to `{{ certbot_config_dir }}/credentials.ini and you
# could add the path to `certbot_command_arguments` if required.
# @end
certbot_credentials: []

# @var certbot_bin:description: Location of the certbot binary. Default is to `~/.local/.bin/certbot`.
certbot_command_arguments:
  - "certonly"

# @var certbot_cron_enabled:description: Enable scheduling via cron.
certbot_cron_enabled: True

certbot_cron_minute: "30"
certbot_cron_hour: "3"

# @var certbot_cron_file:description: Use a file under /etc/cron.d but this will only work if `certbot_user`
# has write permissions for this location.
# @end
# @var certbot_cron_file: $ "_unset_"
# @var certbot_cron_file:example: certbot-letsencrypt