---

haproxy_ssl_dir: "/etc/haproxy/ssl/"

# backward compatibility with a previously used variable
haproxy_stats_enable: False
haproxy_stats_ssl: True
haproxy_stats_host: "*"
haproxy_stats_port: "8080"
haproxy_stats_path: "/"
haproxy_stats_bind_directive: "{{ haproxy_stats_host }}:{{ haproxy_stats_port }} {% if haproxy_stats_ssl %}ssl crt {{ haproxy_ssl_dir }}{% endif %}"

haproxy_stats_internal_enable: True
haproxy_stats_internal_host: "127.0.0.1"
haproxy_stats_internal_port: "8081"

haproxy_stats_external_url: "{% if haproxy_stats_ssl %}https:{% else %}http:{% endif %}//{{ ansible_fqdn }}:{{ haproxy_stats_port }}{{ haproxy_stats_path }}"

haproxy_stats_access_ips: []
haproxy_stats_admin_ips: []
haproxy_stats_users: []
## use crypt(8) password encryption
# haproxy_stats_users:
#   - { login: "", password: "" }

haproxy_backports: "{{ haproxy_jessie_backports | default(false, true) }}"
haproxy_update_config: True
haproxy_force_config: True

haproxy_socket: /run/haproxy/admin.sock
haproxy_chroot: /var/lib/haproxy
haproxy_maintenance_ips: []
haproxy_deny_ips: []

haproxy_backports_packages_stretch: haproxy libssl1.0.0
haproxy_backports_packages_buster: haproxy
haproxy_backports_packages_bullseye: haproxy