diff --git a/nginx-light/README.md b/nginx-light/README.md new file mode 100644 index 00000000..17d20719 --- /dev/null +++ b/nginx-light/README.md @@ -0,0 +1,9 @@ +# nginx-light + +Install Nginx light with a simply default vhost config. + +Used for hypervisors and backups servers. + +## Tasks + +Everything is in the `tasks/main.yml` file. diff --git a/nginx-light/handlers/main.yml b/nginx-light/handlers/main.yml new file mode 100644 index 00000000..d4e42ca0 --- /dev/null +++ b/nginx-light/handlers/main.yml @@ -0,0 +1,5 @@ +--- +- name: reload nginx + service: + name: nginx + state: reloaded diff --git a/nginx-light/tasks/main.yml b/nginx-light/tasks/main.yml new file mode 100644 index 00000000..e2a7374b --- /dev/null +++ b/nginx-light/tasks/main.yml @@ -0,0 +1,35 @@ +--- +- name: Ensure Nginx (light) is installed + apt: + name: nginx-light + state: present + notify: reload nginx + tags: + - nginx + - packages + +- name: Copy default vhost + template: + src: default.j2 + dest: /etc/nginx/sites-available/default + mode: 0644 + notify: reload nginx + tags: + - nginx + - packages + +- name: Enable default vhost + file: + src: /etc/nginx/sites-available/default + dest: /etc/nginx/sites-enabled/default + state: link + notify: reload nginx + tags: + - nginx + - packages + +- name: Ensure Nginx is enabled + service: + name: nginx + state: started + enabled: yes diff --git a/nginx-light/templates/default.j2 b/nginx-light/templates/default.j2 new file mode 100644 index 00000000..919a7a1f --- /dev/null +++ b/nginx-light/templates/default.j2 @@ -0,0 +1,31 @@ +server { + listen 80 default_server; + listen [::]:80 default_server; + + listen 443 ssl default_server; + listen [::]:443 ssl default_server; + + if ($host != "{{ ansible_fqdn }}") { + rewrite ^ https://{{ ansible_fqdn }}$request_uri permanent; + } + + include snippets/snakeoil.conf; + + if ($https != "on") { + return 301 https://{{ ansible_fqdn }}$request_uri; + } + + root /var/www/; + + location /munin { + alias /var/cache/munin/www; + } + + index index.html; + + server_name _; + + location / { + try_files $uri $uri/ =404; + } +}