roles/nginx/tasks/main.yml

@@ -33,17 +33,9 @@
     - {src: proxy_params.j2, dest: /etc/nginx/proxy_params}
     - {src: default.j2, dest: /etc/nginx/sites-available/default}
 
-- name: Create base dir
-  ansible.builtin.file:
-    path: /srv/http
-    owner: root
-    group: www-data
-    mode: 'u+rwx,g+rs,o-rwx'
-    state: directory
-
 - name: Create letsencrypt dir
   ansible.builtin.file:
-    path: /srv/http/common/letsencrypt
+    path: "{{ nginx_letsencrypt_dir }}"
     owner: root
     group: www-data
     mode: 'u+rwx,g+rs,o-rwx'

roles/nginx/templates/default.j2

@@ -16,7 +16,7 @@ server {
 	listen [::]:80 default_server;
 	
 	location /.well-known/acme-challenge {
-		root /srv/http/common/letsencrypt/;
+		root {{ nginx_letsencrypt_dir }};
 	}
 	
 	location / {

roles/nginx/vars/main.yml

@@ -0,0 +1,2 @@
+---
+nginx_letsencrypt_dir: /var/www/common/letsencrypt