nginx: Rename nginx/server to nginx

roles/nginx/tasks/main.yml

@@ -0,0 +1,78 @@
+---
+- name: Include OS-specific variables
+  ansible.builtin.include_vars: "{{ ansible_os_family }}.yml"
+
+- name: Enable nginx:122 module
+  ansible.builtin.command:
+    argv:
+      - dnf
+      - module
+      - -y
+      - enable
+      - nginx:1.22
+    creates: /etc/dnf/modules.d/nginx.module
+  notify: Restart nginx
+  when:
+    - ansible_os_family == "RedHat"
+    - ansible_distribution_major_version | int >= 8
+    - ansible_distribution != "Fedora"
+
+- name: Install packages
+  ansible.builtin.package:
+    name: nginx
+    state: installed
+
+- name: Fix selinux contexts from data directory
+  community.general.sefcontext:
+    path: /srv/web(/.*)?
+    setype: httpd_sys_content_t
+  when: ansible_selinux_python_present
+
+- name: Create nginx data and config directories
+  ansible.builtin.file:
+    state: directory
+    path: "{{ item }}"
+    mode: "0755"
+    owner: root
+    group: "{{ ansible_wheel }}"
+    seuser: _default
+    setype: _default
+  with_items:
+    - /srv/web
+    - "/srv/web/{{ inventory_hostname }}"
+    - "/etc/nginx/conf.d/{{ inventory_hostname }}"
+
+- name: Create nginx base config
+  ansible.builtin.template:
+    src: nginx.conf.j2
+    dest: /etc/nginx/nginx.conf
+    mode: "0644"
+    owner: root
+    group: "{{ ansible_wheel }}"
+  notify: Restart nginx
+
+# https://bugzilla.redhat.com/show_bug.cgi?id=1725248
+- name: Create drop-in directory for service
+  ansible.builtin.file:
+    dest: /etc/systemd/system/nginx.service.d
+    state: directory
+    mode: "0755"
+    owner: root
+    group: "{{ ansible_wheel }}"
+  when: ansible_os_family == "RedHat"
+
+- name: Configure service startup dependencies
+  ansible.builtin.copy:
+    dest: /etc/systemd/system/nginx.service.d/dependency.conf
+    src: dependency.conf
+    mode: "0644"
+    owner: root
+    group: "{{ ansible_wheel }}"
+  when: ansible_os_family == "RedHat"
+
+- name: Enable nginx service
+  ansible.builtin.service:
+    name: nginx
+    arguments: "{% if ansible_system == 'OpenBSD' %}-u{% endif %}"
+    state: started
+    enabled: true