WIP

example/ansible/vars/common.yml

@@ -0,0 +1,41 @@
+common:
+
+  certificates:
+    country_name: "FR"
+    locality_name: "Vannes"
+    organization_name: "iTik"
+    email_address: "ca@itik.fr"
+
+  consul:
+    domain: "itik.fr"
+    datacenter: "lab"
+
+  sites:
+    - name: "test"
+      site: "test.lab"
+      paths:
+        - addrs:
+            - "http://www1"
+            - "http://www2"
+            - "http://www3"
+      custom_cert: true
+      custom_cert_file: "/etc/ssl/certs/test.lab.crt"
+      custom_key_file: "/etc/ssl/private/test.lab.key"
+      crs_plugins:
+        - "wordpress-rule-exclusions"
+      crs_exceptions:
+      # Cf. https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-(v3.x)
+#       before_request:
+#         - 'SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" "id:1,nolog,ctl:ruleRemoveById=932260"'
+        after_response:
+          - 'SecRuleUpdateTargetById 932260 "!ARGS:tag-name"'
+      header_cross_origin_embedder_policy: "unsafe-none"
+      header_content_security_policy:
+        worker-src: "'self' blob:"
+        img-src: "'self' data: https://secure.gravatar.com/avatar/"
+        font-src: "'self' data:"
+        script-src: "'self' 'unsafe-eval'"
+        script-src-elem: "'self' 'unsafe-inline'"
+        style-src-attr: "'self' 'unsafe-inline'"
+        style-src-elem: "'self' 'unsafe-inline'"
+        frame-src: "'self' blob:"