|
|
|
@ -4,8 +4,9 @@
|
|
|
|
|
# but also reduces the surface of attack
|
|
|
|
|
- name: Install NGINX server
|
|
|
|
|
apt:
|
|
|
|
|
name: nginx-light
|
|
|
|
|
update_cache: true
|
|
|
|
|
name: nginx-light
|
|
|
|
|
state: present
|
|
|
|
|
register: apt_result
|
|
|
|
|
retries: 3
|
|
|
|
|
until: apt_result is succeeded
|
|
|
|
@ -13,8 +14,8 @@
|
|
|
|
|
# Install proxy snippets
|
|
|
|
|
- name: Configure NGINX proxy snippets
|
|
|
|
|
template:
|
|
|
|
|
src: "nginx/snippets/{{ item }}.j2"
|
|
|
|
|
dest: "/etc/nginx/snippets/{{ item }}"
|
|
|
|
|
src: nginx/snippets/{{ item }}.j2
|
|
|
|
|
dest: /etc/nginx/snippets/{{ item }}
|
|
|
|
|
mode: 0644
|
|
|
|
|
loop:
|
|
|
|
|
- proxy-common.conf
|
|
|
|
@ -25,7 +26,7 @@
|
|
|
|
|
- name: Configure NGINX sites
|
|
|
|
|
template:
|
|
|
|
|
src: nginx/nginx-sites-available.j2
|
|
|
|
|
dest: "/etc/nginx/sites-available/{{ item.name }}"
|
|
|
|
|
dest: /etc/nginx/sites-available/{{ item.name }}
|
|
|
|
|
mode: 0644
|
|
|
|
|
loop: "{{ reversed_proxy_subdomains }}"
|
|
|
|
|
notify: Reload NGINX service
|
|
|
|
@ -40,8 +41,8 @@
|
|
|
|
|
# Activate sites
|
|
|
|
|
- name: Activate sites
|
|
|
|
|
file:
|
|
|
|
|
src: "/etc/nginx/sites-available/{{ item.name }}"
|
|
|
|
|
dest: "/etc/nginx/sites-enabled/{{ item.name }}"
|
|
|
|
|
src: /etc/nginx/sites-available/{{ item.name }}
|
|
|
|
|
dest: /etc/nginx/sites-enabled/{{ item.name }}
|
|
|
|
|
state: link
|
|
|
|
|
loop: "{{ reversed_proxy_subdomains }}"
|
|
|
|
|
notify: Reload NGINX service
|
|
|
|
|