add crowdsec role, move config logs site -> global, remove caddy_ca_root, modularized Caddy build and config

seb4itik/byow/roles/caddy/vars/main.yml

@@ -1,16 +1,9 @@
 # Sites default parameter values
 caddy_global_sites_defaults:
 
-  # Site settings
+  # Site aliases
+  site_aliases_redirect: true
   site_aliases: []
-  site_redirect_from_aliases: true
-
-  # Log settings
-  # If log_to_file is true, logs will go:
-  # - for each site, in: /var/log/<caddy_my_name>/site_<site id>.log
-  # - for WAF logs (Coraza), in /var/log/<caddy_my_name>/waf.log
-  log_to_file: false
-  log_format: "json"
 
   # Proxy settings
   # See: https://caddyserver.com/docs/caddyfile/directives/reverse_proxy#lb_policy
@@ -90,6 +83,7 @@ caddy_global_sites_defaults:
     - "Content-Length"
     - "Content-Range"
 
+  # Security headers
   header: true
 
   # Security headers
@@ -274,12 +268,12 @@ caddy_global_sites_defaults:
       value: "🍷"
 
   # caddy-ratelimit
-  rate_limit: true
+  rate_limit: "{{ caddy_ratelimit }}"
   rate_limit_events: 1000
   rate_limit_window: "1m"
 
   # steffenbusch/caddy-bot-barrier
-  bot_barrier: false
+  bot_barrier: "{{ caddy_bot_barrier }}"
   bot_barrier_secret: null    # Required
   bot_barrier_complexity: 18
   bot_barrier_valid_for: "60m"
@@ -471,3 +465,5 @@ caddy_global_sites_defaults:
   geoip: false
   geoip_debug: false
   geoip_filter_expression: '{geoip2.country_code} == "UNK"'
+
+  crowdsec: "{{ caddy_crowdsec }}"