--- a/provision/roles/fruitbar/templates/etc/nginx/sites-available/fruitbar	Wed Apr 06 13:06:28 2016 +0800
+++ b/provision/roles/fruitbar/templates/etc/nginx/sites-available/fruitbar	Wed Apr 06 13:07:38 2016 +0800
@@ -37,8 +37,8 @@
 
     # OCSP
     ssl_stapling on;
-    resolver 8.8.8.8 [2001:4860:4860::8888] 8.8.4.4 [2001:4860:4860::8844];
-    resolver_timeout 5s;
+    resolver {{ nginx_resolver }};
+    resolver_timeout {{ nginx_resolver_timeout }};
 
     # HSTS: 31536000 = 365 days (set to 0 to expire and allow plain HTTP)
     add_header Strict-Transport-Security 'max-age=31536000';

--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/provision/roles/nginx/defaults/main.yml	Wed Apr 06 13:07:38 2016 +0800
@@ -0,0 +1,4 @@
+---
+nginx_resolver: '8.8.8.8 [2001:4860:4860::8888] 8.8.4.4 [2001:4860:4860::8844]'
+nginx_resolver_timeout: 5s
+...