caddy_user: caddy
caddy_group: caddy

caddy_conf_dir: /etc/caddy
caddy_asset_dir: /opt/caddy-assets
caddy_bin_dir: /usr/sbin
caddy_xcaddy_dir: /opt/xcaddy
caddy_acmedns_client_bin_dir: /opt/acme-client

caddy_conf_file: "{{ (caddy_conf_dir, 'caddy.json') | path_join }}"

caddy_default_plugins:
  - github.com/caddy-dns/acmedns

# hardcoded in acmedns_client and cannot be changed
caddy_acmedns_client_dir: /etc/acmedns
caddy_acmedns_client_file: /etc/acmedns/clientstorage.json

caddy_use_lego: no
caddy_lego_dir: /opt/lego
caddy_lego_lastrun_file: "{{ (caddy_lego_dir, 'lastrun') | path_join }}"

caddy_domains:
  - "{{ host_fqdn }}"

caddy_acme_endpoint: https://acme-staging-v02.api.letsencrypt.org/directory

caddy_default_config:
  admin:
    disabled: yes
  logging:
    sink:
      writer:
        output: stdout
    logs:
      default:
        writer:
          output: stdout
        encoder:
          format: console
        level: INFO
  storage:
    module: file_system
    root: "{{ caddy_asset_dir }}"
  apps:
    tls:
      session_tickets:
        rotation_interval: 4h
        max_keys: 8
      cache:
        capacity: 512
    http:
      grace_period: 20s