espe/infrastructure
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[mod] role:espe_frontend-and-nginx

Browse source
This commit is contained in:
roydfalk 2024-06-08 14:41:28 +02:00
parent 24ebab6f71
commit 0937621280
3 changed files with 43 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
roles/espe_frontend-and-nginx/defaults/main.json Normal file
View file

@ -0,0 +1,4 @@
{
"var_espe_frontend_end_nginx_domain": "zackeneule.example.org",
"var_espe_frontend_end_nginx_directory": "/opt/zackeneule"
}

35
roles/espe_frontend-and-nginx/tasks/main.json Normal file
View file

@ -0,0 +1,35 @@
[
{
"name": "deactivate default site",
"become": true,
"ansible.builtin.file": {
"state": "absent",
"dest": "/etc/nginx/sites-enabled/default"
}
},
{
"name": "emplace configuration | data",
"become": true,
"ansible.builtin.template": {
"src": "conf.j2",
"dest": "/etc/nginx/sites-available/{{var_espe_frontend_end_nginx_domain}}"
}
},
{
"name": "emplace configuration | link",
"become": true,
"ansible.builtin.file": {
"state": "link",
"src": "/etc/nginx/sites-available/{{var_espe_frontend_end_nginx_domain}}",
"dest": "/etc/nginx/sites-enabled/{{var_espe_frontend_end_nginx_domain}}"
}
},
{
"name": "restart nginx",
"become": true,
"ansible.builtin.systemd_service": {
"state": "restarted",
"name": "nginx"
}
}
]

8
roles/espe_frontend-and-nginx/templates/conf.j2
View file

@ -1,14 +1,14 @@
server {
server_name {{domain}};
server_name {{var_espe_frontend_end_nginx_domain}};
listen 80;
listen [::]:80;
listen [::]:443 ssl http2;
listen 443 ssl http2;
ssl_certificate /etc/ssl/certs/{{domain}}.pem;
ssl_certificate_key /etc/ssl/private/{{domain}}.pem;
ssl_certificate /etc/ssl/certs/{{var_espe_frontend_end_nginx_domain}}.pem;
ssl_certificate_key /etc/ssl/private/{{var_espe_frontend_end_nginx_domain}}.pem;
include /etc/nginx/ssl-hardening.conf;
root {{directory}};
root {{var_espe_frontend_end_nginx_directory}};
}