---

dehydrated_contactemail: certmaster@example.com

dehydrated_letsencrypt_agreed_terms: https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf

dehydrated_domains: |
  example.com
  example.org www.example.org blog.example.org


dehydrated_deploy_cert: |
  mkdir -p /etc/nginx/ssl/${DOMAIN}
  cp "${KEYFILE}" "${CERTFILE}" "${FULLCHAINFILE}" "${CHAINFILE}" /etc/nginx/ssl/${DOMAIN}
  chown root:www-data /etc/nginx/ssl/${DOMAIN}/*
  chmod 600 /etc/nginx/ssl/${DOMAIN}/*
  hash systemctl 2>/dev/null && systemctl restart nginx.service


# use letsencrypt test api
dehydrated_acme_api: https://acme-staging.api.letsencrypt.org/directory
# use test version with workaround for unreachable private test vms
dehydrated_repourl: https://github.com/martin-v/dehydrated.git
dehydrated_commit: selfsigned_for_test_in_vms

---

dehydrated_contactemail: yet-another-domain-because-letsencrypt-ban-example.com@mailinator.com

dehydrated_letsencrypt_agreed_terms: https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf

dehydrated_domains: |
  example.com
  example.org www.example.org blog.example.org


dehydrated_deploy_cert: |
  mkdir -p /etc/nginx/ssl/${DOMAIN}
  cp "${KEYFILE}" "${CERTFILE}" "${FULLCHAINFILE}" "${CHAINFILE}" /etc/nginx/ssl/${DOMAIN}
  chown root:www-data /etc/nginx/ssl/${DOMAIN}/*
  chmod 600 /etc/nginx/ssl/${DOMAIN}/*
  hash systemctl 2>/dev/null && systemctl restart nginx.service


# use letsencrypt test api
dehydrated_acme_api: https://acme-staging.api.letsencrypt.org/directory
# use test version with workaround for unreachable private test vms
dehydrated_repourl: https://github.com/martin-v/dehydrated.git
dehydrated_commit: selfsigned_for_test_in_vms

Use another domain for test dehydrated_contactemail
Use another domain for test dehydrated_contactemail

because letsencrypt ban account with example.com in staging env, see
https://travis-ci.org/martin-v/ansible-dehydrated/builds/427117499#L2303
