espe/infrastructure
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[mod] role:espe_frontend_and_nginx

Browse source
This commit is contained in:
roydfalk 2024-06-09 08:13:42 +02:00
parent 0937621280
commit 590173f03a
3 changed files with 12 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
roles/espe_frontend-and-nginx/defaults/main.json
View file

@ -1,4 +1,5 @@
{ {
"var_espe_frontend_end_nginx_domain": "zackeneule.example.org", "var_espe_frontend_and_nginx_domain": "zackeneule.example.org",
"var_espe_frontend_end_nginx_directory": "/opt/zackeneule" "var_espe_frontend_and_nginx_directory": "/opt/zackeneule",
"var_espe_frontend_and_nginx_tls": true
} }

6
roles/espe_frontend-and-nginx/tasks/main.json
View file

@ -12,7 +12,7 @@
"become": true, "become": true,
"ansible.builtin.template": { "ansible.builtin.template": {
"src": "conf.j2", "src": "conf.j2",
"dest": "/etc/nginx/sites-available/{{var_espe_frontend_end_nginx_domain}}" "dest": "/etc/nginx/sites-available/{{var_espe_frontend_and_nginx_domain}}"
} }
}, },
{ {
@ -20,8 +20,8 @@
"become": true, "become": true,
"ansible.builtin.file": { "ansible.builtin.file": {
"state": "link", "state": "link",
"src": "/etc/nginx/sites-available/{{var_espe_frontend_end_nginx_domain}}", "src": "/etc/nginx/sites-available/{{var_espe_frontend_and_nginx_domain}}",
"dest": "/etc/nginx/sites-enabled/{{var_espe_frontend_end_nginx_domain}}" "dest": "/etc/nginx/sites-enabled/{{var_espe_frontend_and_nginx_domain}}"
} }
}, },
{ {

10
roles/espe_frontend-and-nginx/templates/conf.j2
View file

@ -1,14 +1,16 @@
server { server {
server_name {{var_espe_frontend_end_nginx_domain}}; server_name {{var_espe_frontend_and_nginx_domain}};
listen 80; listen 80;
listen [::]:80; listen [::]:80;
{% if var_espe_frontend_and_nginx_tls %}
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
listen 443 ssl http2; listen 443 ssl http2;
ssl_certificate /etc/ssl/certs/{{var_espe_frontend_end_nginx_domain}}.pem; ssl_certificate /etc/ssl/certs/{{var_espe_frontend_and_nginx_domain}}.pem;
ssl_certificate_key /etc/ssl/private/{{var_espe_frontend_end_nginx_domain}}.pem; ssl_certificate_key /etc/ssl/private/{{var_espe_frontend_and_nginx_domain}}.pem;
include /etc/nginx/ssl-hardening.conf; include /etc/nginx/ssl-hardening.conf;
{% endif %}
root {{var_espe_frontend_end_nginx_directory}}; root {{var_espe_frontend_and_nginx_directory}};
} }