caddy_user: caddy
caddy_group: caddy

caddy_conf_dir: /etc/caddy
caddy_asset_dir: /opt/caddy-assets
caddy_bin_dir: /usr/sbin
caddy_cert_dir: /etc/caddy/certs
caddy_xcaddy_dir: /opt/xcaddy

caddy_conf_file: "{{ (caddy_conf_dir, 'caddy.json') | path_join }}"

caddy_ecc384_cert: "{{ (caddy_cert_dir, 'ecc384.crt') | path_join }}"
caddy_ecc384_key: "{{ (caddy_cert_dir, 'ecc384.key') | path_join }}"
caddy_rsa2048_cert: "{{ (caddy_cert_dir, 'rsa2048.crt') | path_join }}"
caddy_rsa2048_key: "{{ (caddy_cert_dir, 'rsa2048.key') | path_join }}"

caddy_default_plugins: []
caddy_domains:
  - "{{ host_fqdn }}"

caddy_default_config:
  admin:
    disabled: yes
  logging:
    sink:
      writer:
        output: stdout
    logs:
      default:
        writer:
          output: stdout
        encoder:
          format: console
        level: INFO
  storage:
    module: file_system
    root: "{{ caddy_asset_dir }}"
  apps:
    tls:
      session_tickets:
        rotation_interval: 4h
        max_keys: 8
      cache:
        capacity: 512
    http:
      grace_period: 20s