nginx/default_server: Extracted status_page_acl var

group_vars/all/vars.yml

@@ -44,6 +44,12 @@ global_wireguard_private_directory: "{{ global_credentials_directory }}/wireguar
 global_wireguard_public_directory: "{{ global_public_key_directory }}/wireguard/keys"
 global_wireguard_peers_directory: "{{ global_public_key_directory }}/wireguard/peers"
 
+nginx_status_page_acl: |
+  allow 127.0.0.1/8;
+  allow ::1;
+  allow {{ global_wireguard_ipv4_range }};
+  deny all;
+
 ssh_host_key_types:
   - ed25519
   - rsa

roles/nginx/default_server/defaults/main.yml

@@ -0,0 +1,3 @@
+---
+
+status_page_acl: "{{ nginx_status_page_acl }}"

roles/nginx/default_server/meta/main.yml

@@ -14,8 +14,5 @@ dependencies:
       }
       location = /status {
         stub_status;
-        allow 127.0.0.1/8;
-        allow ::1;
-        allow {{ global_wireguard_ipv4_range }};
-        deny all;
+        {{ status_page_acl | indent(width=2) }}
       }