foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

first version of proxy site for nginx

Browse source
This commit is contained in:
Timo Makinen 2019-05-27 23:49:38 +03:00
parent d448eb6522
commit ba0c70532f
2 changed files with 96 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

42
roles/nginx/site/templates/site.conf.j2 Normal file
View file

@ -0,0 +1,42 @@
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name {{ site }};
ssl_certificate {{ tls_certs }}/{{ site }}.crt;
ssl_trusted_certificate {{ tls_certs }}/{{ site }}-chain.crt;
ssl_certificate_key {{ tls_private }}/{{ site }}.key;
{% if redirect is defined %}
return 301 {{ redirect }};
{% elif proxy is defined %}
location / {
proxy_pass {{ proxy }};
proxy_ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt;
proxy_ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key;
}
{% else %}
root /srv/web/{{ site }};
{% endif %}
include /etc/nginx/conf.d/{{ site }}/*.conf;
}
server {
ssl off;
listen 80;
listen [::]:80;
server_name {{ site }};
location /.well-known/acme-challenge/ {
proxy_pass https://noc02.home.foo.sh/.well-known/acme-challenge/;
proxy_ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt;
proxy_ssl_certificate_key {{ tls_private }}/{{ inventory_hostname }}.key;
}
location / {
{% if redirect is defined %}
return 301 {{ redirect }};
{% else %}
return 301 https://$host$request_uri;
{% endif %}
}
}