---

nginx_package:              "nginx-light"
nginx_user:                 "www-data"
nginx_modules_dir:          "/etc/nginx/modules-enabled"


nginx_tls_version:          "TLSv1.2 TLSv1.3"
nginx_tls_cipherlist:       "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:!SHA:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS"
nginx_tls_curve:            "prime256v1:secp384r1"
nginx_tls_cache_size:       "10m"
nginx_tls_session_timeout:  "1h"
nginx_ssl_stapling:         "on"
nginx_ssl_stapling_verify:  "on"
nginx_wk_acme:              "/var/lib/dehydrated/acme-challenges"
nginx_client_max_body_size: "32m"