webserver: add default acme location, set defaults

webserver/defaults/main.yml

@@ -2,3 +2,6 @@
 
 cipher_strength: modern
 nginx_pam_groups: []
+webserver_enable_acme_default: true
+webserver_enable_ipv6: true
+webserver_resolver: "{{ nameservers }}"

webserver/templates/nginx-proxy.conf

@@ -38,7 +38,7 @@ http {
     include /etc/nginx/mime.types;
     default_type application/octet-stream;
 
-    resolver {{nameservers|join(" ")}} ipv6={{ webserver_enable_ipv6 }};
+    resolver {{ webserver_resolver|join(" ") }} ipv6={{ webserver_enable_ipv6 }};
 
     ##
     # SSL Settings
@@ -90,4 +90,14 @@ http {
     include /etc/nginx/sites-available/tls-proxy;
     {% endif %}
 
+    {% if webserver_enable_acme_default %}
+    server {
+        listen 80;
+        server_name _;
+        include /etc/nginx/snippets/acmetool.conf;
+        location / {
+            deny all;
+        }
+    }
+    {% endif %}
 }

webserver/templates/nginx.conf

@@ -31,7 +31,7 @@ http {
     include /etc/nginx/mime.types;
     default_type application/octet-stream;
 
-    resolver {{nameservers|join(" ")}} ipv6={{ webserver_enable_ipv6 }};
+    resolver {{ webserver_resolver|join(" ") }} ipv6={{ webserver_enable_ipv6 }};
 
     ##
     # SSL Settings