ansible-config/group_vars/web.yml

---
web:
  ssl:
    hamburg_freifunk_net:
      cert:    /etc/ssl/certs/hamburg.freifunk.net.crt
      key:     /etc/ssl/private/hamburg.freifunk.net.key
      dhparam: /etc/ssl/dhparam/hamburg.freifunk.net.dh

    wildcard_hamburg_freifunk_net:
      cert:    /etc/ssl/certs/WILDCARD.hamburg.freifunk.net.crt
      key:     /etc/ssl/private/WILDCARD.hamburg.freifunk.net.key
      dhparam: /etc/ssl/dhparam/WILDCARD.hamburg.freifunk.net.dh

  sites:
    static:
      ffhh_media:
        domains:
          - media.services.ffhh
          - media.hamburg.freifunk.net
        ports:
          - { number: 80, ssl: false }
          - { number: 443, ssl: true }
        document_root: { path: /var/www/media, create: true }
        listing: true

      ffhh_meta:
        domains:
          - meta.hamburg.freifunk.net
        ports:
          - { number: 80, ssl: false }
          - { number: 443, ssl: true }
        document_root: { path: /var/www/meta, create: true }
        listing: true