---

nginx_upstream_server_params:
  - key: 'weight'
    default: 1
  - key: 'max_fails'
    default: 1
  - key: 'fail_timeout'
    default: '10s'
  - key: 'backup'
    is_bool: true
  - key: 'down'
    is_bool: true
    default: false
  - key: 'route'
    default: 'configuration_error'
  - key: 'slow_start'
    default: 0
# Nginx Plus only
#  - key: 'max_conns'
#    default: 0
#    min_version: '1.5.9'
#  - key: 'resolve'
#    is_bool: true
#    min_version: '1.5.12'

nginx_dirs:
  - dir: "{{ nginx_htpasswd_dir }}"
    mode: "0750"
    owner: "{{ nginx_user }}"
  - dir: "{{ nginx_ssl_dir }}"
    mode: "0750"
    owner: "root"
  - dir: "{{ nginx_helper_dir }}"
    mode: "0755"
    owner: "root"
  - dir: "{{ nginx_etc_dir }}/modules-available"
    mode: "0755"
    owner: "root"
  - dir: "{{ nginx_etc_dir }}/modules-enabled"
    mode: "0755"
    owner: "root"

nginx_templates_no_dir:
  - '_proxy'

nginx_servers_default_headers:
  'X-Frame-Options': 'DENY always'
  'X-Content-Type-Options': 'nosniff always'
  'X-XSS-Protection': '1; mode=block always'

nginx_acmesh_bin: "{{ nginx_acmesh_dir }}/acme.sh"