ansible-roles/nginx/tasks/ip_whitelist.yml

---
- name: add IP addresses to private IP whitelist
  lineinfile:
    dest: /etc/nginx/snippets/ipaddr_whitelist
    line: "allow {{ item }};"
    state: present
  with_items: "{{ nginx_ipaddr_whitelist_present }}"
  notify: reload nginx
  tags
    - nginx
Make ip whitelist tasks more flexible Now the list of whitelisted ip addresses can be updated simply by including the specific tasks in an external playbook without polluting our role list. This change takes effect for nginx, apache and fail2ban. 2018-10-29 21:53:46 +01:00			`---`
			`- name: add IP addresses to private IP whitelist`
			`lineinfile:`
			`dest: /etc/nginx/snippets/ipaddr_whitelist`
			`line: "allow {{ item }};"`
			`state: present`
			`with_items: "{{ nginx_ipaddr_whitelist_present }}"`
			`notify: reload nginx`
			`tags`
			`- nginx`