foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nginx_site: Prefix all variables with role name

Browse source
This commit is contained in:
Timo Makinen 2023-10-13 17:14:14 +00:00
parent 15c612cb3b
commit 2119f96382
9 changed files with 103 additions and 101 deletions
Download patch file Download diff file Expand all files Collapse all files

26
roles/nginx_site/tasks/main.yml
View file

@ -1,47 +1,47 @@
---
- name: "Create site data directory for {{ site }}"
- name: "Create site data directory for {{ nginx_site_name }}"
ansible.builtin.file:
path: "/srv/web/{{ site }}"
path: "/srv/web/{{ nginx_site_name }}"
state: directory
mode: "0755"
owner: root
group: "{{ ansible_wheel }}"
when: redirect is not defined and proxy is not defined
when: nginx_site_redirect is not defined and nginx_site_proxy is not defined
- name: "Create site config for {{ site }}"
- name: "Create site config for {{ nginx_site_name }}"
ansible.builtin.template:
dest: /etc/nginx/conf.d/{{ site }}.conf
dest: /etc/nginx/conf.d/{{ nginx_site_name }}.conf
src: site.conf.j2
mode: "0644"
owner: root
group: "{{ ansible_wheel }}"
notify: Restart nginx
- name: "Copy site private key for {{ site }}"
- name: "Copy site private key for {{ nginx_site_name }}"
ansible.builtin.copy:
dest: "{{ tls_private }}/{{ site }}.key"
dest: "{{ tls_private }}/{{ nginx_site_name }}.key"
src: "{{ item }}"
mode: "0600"
owner: root
group: "{{ ansible_wheel }}"
with_first_found:
- "/srv/letsencrypt/live/{{ site }}/privkey.pem"
- "/srv/ca/private/{{ site }}.key"
- "/srv/letsencrypt/live/{{ nginx_site_name }}/privkey.pem"
- "/srv/ca/private/{{ nginx_site_name }}.key"
- "/srv/ca/private/{{ inventory_hostname }}.key"
tags: certificates
notify: Restart nginx
- name: "Copy site certificate for {{ site }}"
- name: "Copy site certificate for {{ nginx_site_name }}"
ansible.builtin.copy:
src: "{{ item }}"
dest: "{{ tls_certs }}/{{ site }}-fullchain.crt"
dest: "{{ tls_certs }}/{{ nginx_site_name }}-fullchain.crt"
mode: "0644"
owner: root
group: "{{ ansible_wheel }}"
validate: /usr/bin/openssl x509 -in %s -noout
with_first_found:
- "/srv/letsencrypt/live/{{ site }}/fullchain.pem"
- "/srv/ca/certs/hosts/{{ site }}.crt"
- "/srv/letsencrypt/live/{{ nginx_site_name }}/fullchain.pem"
- "/srv/ca/certs/hosts/{{ nginx_site_name }}.crt"
- "/srv/ca/certs/hosts/{{ inventory_hostname }}.crt"
tags: certificates
notify: Restart nginx