Add http/https endpoints for relayed hosts

group_vars/relay.yml

@@ -37,5 +37,7 @@ firewall_raw:
   - pass quick proto carp
 firewall_in:
   - {proto: tcp, port: 22, from: [172.20.20.0/22]}
+  - {proto: tcp, port: 80}
+  - {proto: tcp, port: 443}
   - {proto: tcp, port: 636}
   - {proto: tcp, port: 6514}

playbooks/relay.yml

@@ -13,3 +13,17 @@
     - base
     - ifstated
     - relayd
+    - nginx/server
+
+  tasks:
+    - include_role:
+        name: nginx/site
+      vars:
+        site: "{{ sitename }}"
+        redirect: https://www.foo.sh/
+      with_items:
+        - ldap.foo.sh
+        - ldap01.foo.sh
+        - loghost.foo.sh
+      loop_control:
+        loop_var: sitename