ansible-roles/nginx
Mathieu Trossevin 93084d6ce8
nginx: Do not use spawn-fcgi for munin-graph
systemd provides already provides all the fonctionnalities of spawn-fcgi
with the exception of the possibility to spawn multiple process to a
single socket (it can be done using multiwatch though). So we might as
well use the fonctions provided by systemd instead of needing to install
a new package and add a layer of indirection in how the fastcgi service
is managed.

This make for a somewhat simpler service that can be started as an
unprivileged user.
2021-11-17 13:52:15 +01:00
..
defaults nginx: no more "minimal" mode, but the package remains customizable. 2021-02-04 11:31:36 +01:00
files nginx: Do not use spawn-fcgi for munin-graph 2021-11-17 13:52:15 +01:00
handlers Squash: conventions, evolinux, etc-git… 2016-12-21 16:12:30 +01:00
meta Update Galaxy metadata (company, platforms and galaxy_tags) 2021-06-28 15:26:28 +02:00
tasks nginx: Do not use spawn-fcgi for munin-graph 2021-11-17 13:52:15 +01:00
templates nginx: no more "minimal" mode, but the package remains customizable. 2021-02-04 11:31:36 +01:00
tests Add serverspec test to nginx role 2017-03-09 16:36:25 -05:00
.kitchen.yml Kitchen: Change base image to evolix/ansible 2017-06-02 08:38:08 -04:00
README.md apache/nginx/fail2ban: mention ip_whitelist.yml in README.md 2018-11-02 18:18:22 +01:00

nginx

Install Nginx.

Tasks

Everything is in the tasks/main.yml file.

There are 2 modes : minimal and regular.

The minimal mode is for servers without real web apps, and only access to munin graphs…

The regular mode is for full fledged web services with optimized defaults.

An ip_whitelist.yml standalone task file is available to update IP adresses whitelist without rolling the whole role.

Available variables

Main variables are :

  • nginx_minimal : very basic install and config (default: False) ;
  • nginx_backports : we can prefer higher version from backports (default: False) ;
  • nginx_ipaddr_whitelist_present : list of IP addresses to have in the private whitelist ;
  • nginx_ipaddr_whitelist_absent : list of IP addresses not to have in the whitelist ;
  • nginx_private_htpasswd_present : list of users to have in the private htpasswd ;
  • nginx_private_htpasswd_absent : list of users to not have in the private htpasswd.

The full list of variables (with default values) can be found in defaults/main.yml.