---

defaults_zm:
  tools: false  # install admin-tools for disk-space & i/o troubleshooting
  timezone: ''
  add_repo: false  # not needed on debian

  manage:
    db: true
    webserver: true

  path:
    data: '/usr/share/zoneminder'
    bin: '/usr/bin'
    lib: '/usr/lib/x86_64-linux-gnu'
    conf: '/etc/zm'
    web: '/usr/share/zoneminder/www'
    cgi: '/usr/lib/zoneminder/cgi-bin'
    cache: '/var/cache/zoneminder'

  apache:
    # domain:
    aliases: []
    admin: 'zoneminder@template.ansibleguy.net'
    port_plain: 80
    port_ssl: 443

    mode: 'serve'  # DO NOT CHANGE!
    app_include: true  # DO NOT CHANGE!
    file: 'zoneminder'  # /etc/apache2/sites-available/site_${file}_app.conf

    ssl:  # see: https://github.com/ansibleguy/infra_certs
      mode: 'snakeoil'  # existing/selfsigned/ca/letsencrypt/snakeoil
      cert:
        name:
        cn: 'NextCloud Certificate'
        org: 'AnsibleGuy'

    security: {}  # see: https://github.com/ansibleguy/infra_apache

  database:
    name: 'zm'
    user: 'zoneminder'
    # default => random pwd will be generated
    pwd: "{{ lookup('password', tmp_pwd_file_prefix + '_mysql chars=ascii_letters,digits length=' + random_pwd_length) }}"
    settings: {}  # mariadb setting overrides

    # ONLY CHANGE IF DB IS NOT MANAGED BY ROLE!
    update_password: 'on_create'  # or 'always'
    type: 'mysql'
    host: 'localhost'
    # port_socket: