---
# file: roles/haproxy/defaults/main.yml

haproxy_config_file: "example.haproxy.cfg.j2"
haproxy_local_cert: true

# Set for entire group

haproxy_shared_ip: ""
haproxy_shared_ip_subnet: "/24"
haproxy_shared_virtual_router_id: 25
haproxy_shared_password: ""
haproxy_keepalived_process_weight: 10
haproxy_listen_ports: 
  - port : 22
    protocol: tcp
  - port : 80
    protocol: tcp
  - port : 443
    protocol: tcp
  - port : 9999
    protocol: tcp

# Set per host

haproxy_shared_state: MASTER
haproxy_shared_priority: 100
haproxy_bind_adapter: "eth0"
haproxy_keepalived_adapter: "eth0"
haproxy_keepalived_adapter_vlan: ""
haproxy_keepalived_ip: 172.16.10.1/24

# Cerbot configuration
haproxy_certbot_enable: true
haproxy_certbot_user: "{{ ansible_user_id }}"

# Private key file used for cluster member communication
haproxy_private_key: "/root/.ssh/HaProxyPrivateKey"

# Certbot renewal timer
haproxy_certbot_renewal_timer_calendar: "*-*-* 01:00"
haproxy_certbot_renewal_random_delay: ""