# Copy to vault.yml and encrypt with: ansible-vault encrypt vault.yml
# Reference in playbook with: ansible-playbook --ask-vault-pass gitea.yml
---
cf_origin_cert: |
  -----BEGIN CERTIFICATE-----
  <paste cert from Cloudflare here>
  -----END CERTIFICATE-----

cf_origin_key: |
  -----BEGIN PRIVATE KEY-----
  <paste key from Cloudflare here>
  -----END PRIVATE KEY-----