---
# HTTP-only vhosts, used for the initial certbot webroot challenge and
# permanently for redirecting to HTTPS afterwards.
nginx_vhosts:
  - server_name: "{{ woodpecker_domain }}"
    filename: "{{ woodpecker_domain }}.conf"
    root: "/var/www/letsencrypt"
    extra_parameters: |
      location /.well-known/acme-challenge/ {
        root /var/www/letsencrypt;
      }
      location / {
        return 301 https://$host$request_uri;
      }

  - server_name: "{{ zot_domain }}"
    filename: "{{ zot_domain }}.conf"
    root: "/var/www/letsencrypt"
    extra_parameters: |
      location /.well-known/acme-challenge/ {
        root /var/www/letsencrypt;
      }
      location / {
        return 301 https://$host$request_uri;
      }

certbot_create_if_missing: true
certbot_create_method: webroot
certbot_webroot: /var/www/letsencrypt
certbot_admin_email: "{{ letsencrypt_email }}"
certbot_certs:
  - domains:
      - "{{ woodpecker_domain }}"
  - domains:
      - "{{ zot_domain }}"