# defaults file for caddy

caddy_root: /usr/share/caddy
caddy_config_path: /etc/caddy/Caddyfile
caddy_service_name: caddy

caddy_trust_local_ca: false

# system user/group for Caddy runtime files
caddy_user: caddy
caddy_group: caddy

# path where role will deploy Caddy authority certs
caddy_authorities_path: /var/lib/caddy/.local/share/caddy/pki/authorities/local
caddy_authorities_mode: '0700'

# templates subdirectory that contains the cert files (role/templates/<dir>/...)
caddy_certs_template_dir: certs

# ownership/mode for deployed cert files
caddy_cert_owner: "{{ caddy_user }}"
caddy_cert_group: "{{ caddy_group }}"
caddy_cert_mode: '0600'

# ownership/mode for caddy_root
caddy_root_owner: www-data
caddy_root_group: www-data
caddy_root_mode: '0755'