some updates

This commit is contained in:
histausse 2022-08-07 18:43:35 +02:00
parent b1c93d6089
commit e5dbdf1e3a
Signed by: histausse
GPG key ID: 67486F107F62E9E9
4 changed files with 20 additions and 3 deletions

View file

@ -41,7 +41,8 @@ The variable `http_sites` is a dictionnary of the http site managed by nginx.
http_sites: http_sites:
`server_name`: `server_name`:
root_snippets: root_snippets:
- ? TODO - ? TODO (currently, raw strings added to the config (like `location.my_location.config`)
use_certbot: bool, optionnal, indicate that the certbot role should generate this certificat.
locations: locations:
`location`: `location`:
templates: templates:
@ -61,6 +62,12 @@ Inside the templates, `server_name` is accessed with `{{ item.key }}`, en variab
Inside templates of a location, in addition to the variables of the server block, the variables of the location block can be accessed with `{{ location.value.varname }}`, and the value of `location` with `{{ location.key }}`. Inside templates of a location, in addition to the variables of the server block, the variables of the location block can be accessed with `{{ location.value.varname }}`, and the value of `location` with `{{ location.key }}`.
## Recommander role
The `certbot` role is recommanded to use with this role. It generate LE certificates and has this role has a dependency.
https://gitea.auro.re/Pains-Perdus/certbot
## Copyright ## Copyright
Copyright 2021 Jean-Marie Mineau <histausse@protonmail.com> Copyright 2021 Jean-Marie Mineau <histausse@protonmail.com>

View file

@ -106,5 +106,14 @@
template: template:
src: http_proxy_acme.j2 src: http_proxy_acme.j2
dest: "/etc/nginx/sites-available/acme_http_proxy_{{ item.key }}" dest: "/etc/nginx/sites-available/acme_http_proxy_{{ item.key }}"
loop: "{{ ssl_reverse_proxy_upstream | dict2items}}" loop: "{{ ssl_reverse_proxy_upstream | default({}) | dict2items}}"
notify: Reload nginx
- name: Activate sites
file:
src: "/etc/nginx/sites-available/acme_http_proxy_{{ item.key }}"
dest: "/etc/nginx/sites-enabled/acme_http_proxy_{{ item.key }}"
state: link
force: yes
loop: "{{ ssl_reverse_proxy_upstream | default({}) | dict2items}}"
notify: Reload nginx notify: Reload nginx

View file

@ -1,4 +1,4 @@
i{{ ansible_managed | comment }} {{ ansible_managed | comment }}
server { server {
listen 80; listen 80;
listen [::]:80; listen [::]:80;

View file

@ -55,6 +55,7 @@ server {
{{ config }} {{ config }}
{%- endfor -%} {%- endfor -%}
{%- endfilter %}
# Logs # Logs
access_log /var/log/nginx/{{ item.key }}.log; access_log /var/log/nginx/{{ item.key }}.log;