---
# Certbot auto-renew cron job configuration (for certificate renewals)
certbot_auto_renew: true
# Enable/Disable to use staging server instead of production (useful for testing)
certbot_testmode: false
# Enable/Disable delete certificates prior generating
certbot_delete_certs: false
# Parameters used when creating new Certbot certs.
certbot_create_if_missing: false

#
## Parameters DNS Plugins - You must set one certbot_dns_plugin
#

# Only for RFC 2136
certbot_dns_plugin: rfc2136
certbot_dns_target_server: 127.0.0.1
certbot_dns_target_server_port: 53
certbot_dns_tsig_keyname: certbot.
certbot_dns_key_secret: xwOGjKnek3ec15X4q4wM/2I180UXoMyN4INVhJNi8V9BCV+jMw2mXgZw/CSuxUT8C7NKKFs AmKd7ak51vWKgSl12ib86oQRPkpDjg==3pEsFF9Y7or8p3u1bO0FyrXw49TU=
certbot_dns_key_algorithm: HMAC-SHA512

# Others API (email and/or token) - cloudflare, luadns, digitalocean, etc
# certbot_dns_plugin: luadns
# certbot_dns_api_email: user@example.com
# certbot_dns_api_token: 31209dMAsdasijFkok312hiqdkp
# certbot_dns_credentials_custom_file: <file-path> # use when plugin is not directly supported by this role

certbot_admin_email: email@example.com
certbot_certs: []
# - email: janedoe@example.com
#   domains:
#     - example1.com
#     - example2.com
# - domains:
#     - example3.com

certbot_create_reload_services: [] # remove brackets if adding services
#   - haproxy
#   - nginx
#   - apache
#   - httpd

# Where to put Certbot when installing from source.
certbot_dir: /opt/certbot

# Certbot extra args
certbot_create_command_extra_options: ""