bgwaf/seb4itik/byow/roles/caddy/defaults/main.yml

# Defaults
caddy_config_only: false
caddy_debug: false
caddy_http_port: 80
caddy_https_port: 443
caddy_default_bind: ""

caddy_version: "2.10.2"
caddy_go_version: "1.25.6"
caddy_xcaddy_version: "0.4.5"
caddy_coraza_caddy_version: "2.1.0"  # Coraza v3.3.3
caddy_owasp_crs_versions: ["4.22.0"]

caddy_my_name: "mywaf"
caddy_system_user: "{{ caddy_my_name }}"
caddy_system_group: "{{ caddy_my_name }}"
caddy_home_dir: "/opt/{{ caddy_my_name }}"
caddy_config_dir: "/etc/{{ caddy_my_name }}"
caddy_log_dir: "/var/log/{{ caddy_my_name }}"

# Required for Let's Encrypt auto certificates
caddy_email: null

# If a custom CA root have to be used
caddy_ca_root: null

# See: https://dev.maxmind.com/geoip/updating-databases/
caddy_geoip_account_id: null
caddy_geoip_license_key: null
caddy_geoip_edition_ids: "GeoLite2-ASN,GeoLite2-Country,GeoLite2-City"
caddy_geoip_update_frequency: 86400   # In seconds


# Cf.: https://github.com/coreruleset/plugin-registry
caddy_crs_plugins:
  - name: "drupal-rule-exclusions"
    version: "1.0.0"
  - name: "wordpress-rule-exclusions"
    version: "1.2.0"
  - name: "nextcloud-rule-exclusions"
    version: "1.5.0"
  - name: "dokuwiki-rule-exclusions"
    version: "1.0.0"
  - name: "phpmyadmin-rule-exclusions"
    version: "1.0.0"
    has_after_config: true
  - name: "roundcube-rule-exclusions"
    version: "1.0.4"
    provider: "EsadCetiner"
  - name: "sogo-rule-exclusions"
    version: "1.0.4"
    provider: "EsadCetiner"


# For each site, mandatories parameters
caddy_sites: []
# - id: ""
#   name: ""
#   paths:
#     - path: ""  (default "*")
#       addrs:    (minimum 1 required)
#         - ""


# Will be merged with caddy_global_sites_defaults
caddy_my_sites_defaults: {}