Allow running NGINX on a different (local) port

roles/nginx/defaults/main.yml

 ---
 dhparam_bits: 2048
 
+# Ports that NGINX should bind to. Only change if you are setting
+# up transparent proxies or other network-level trickery on frontends.
+nginx_http_port: 80
+nginx_https_port: 443
+
 # How much memory to use for key caching in the proxy_cache.
 nginx_cache_keys_mem: "64m"
 

roles/nginx/templates/config/sites-available/default

@@ -9,7 +9,7 @@ map $http_host $top_level_domain_redirect {
 }
 
 server {
-        listen [::]:80 default_server ipv6only=off;
+        listen [::]:{{ nginx_http_port }} default_server ipv6only=off;
         server_name _;
 
 {# Only enable this if the 'acme' service is defined,
@@ -33,7 +33,7 @@ server {
 }
 
 server {
-        listen [::]:443 http2 default_server ipv6only=off;
+        listen [::]:{{ nginx_https_port }} http2 default_server ipv6only=off;
         server_name _;
         ssl on;
 

roles/nginx/templates/nginx-vhost.j2

@@ -23,7 +23,7 @@
 
 {% macro config_vhost(endpoint, shard=None) %}
 server {
-        listen [::]:443 http2;
+        listen [::]:{{ nginx_https_port }} http2;
 {% if endpoint.domains %}
         server_name {{ endpoint.domains | join(' ') }};
 {% else %}