---
# ansible-role-template/defaults/main.yml
# Default values for role variables
# ===================================

# Service configuration
role_template_service_name: "default_service"
role_template_service_port: 80

# User and permissions
role_template_service_user: "nobody"
role_template_service_group: "nogroup"
role_template_service_uid: 65534
role_template_service_gid: 65534
role_template_service_mode: "0755"

# Directory structure
role_template_service_dir: "/opt/{{ role_template_service_name }}"
role_template_service_backup_dir: "/var/backups/{{ role_template_service_name }}"

# Systemd configuration (if applicable)
role_template_systemd_enabled: false
role_template_systemd_override_dir: "/etc/systemd/system/{{ role_template_service_name }}.d"

# Security
role_template_validate_certs: true
role_template_ssl_ciphers: "HIGH:!aNULL:!MD5"
role_template_ssl_protocols: "TLSv1.2:TLSv1.3"

# Backup
role_template_backup_enabled: false
role_template_backup_retention: 7
role_template_backup_archive_path: "/var/backups/{{ role_template_service_name }}/archive"

# Monitoring (optional)
role_template_monitoring_enabled: false
role_template_monitoring_interval: 60
role_template_monitoring_notify_email: "admin@example.com"