ansible/roles/nginx/server/tasks/main.yml

62 lines
1.5 KiB
YAML
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

---
- name: include os-specific variables
include_vars: "{{ ansible_os_family }}.yml"
- name: install nginx packages
package:
name: nginx
state: installed
- name: fix selinux contexts from data directory
sefcontext:
path: /srv/web(/.*)?
setype: httpd_sys_content_t
when: ansible_selinux_python_present == true
- name: create nginx data and config directories
file:
state: directory
path: "{{ item }}"
mode: 0755
owner: root
group: "{{ ansible_wheel }}"
seuser: _default
setype: _default
with_items:
- /srv/web
- "/srv/web/{{ inventory_hostname }}"
- "/etc/nginx/conf.d/{{ inventory_hostname }}"
- name: create nginx base config
template:
src: nginx.conf.j2
dest: /etc/nginx/nginx.conf
mode: 0644
owner: root
group: "{{ ansible_wheel }}"
notify: restart nginx
# https://bugzilla.redhat.com/show_bug.cgi?id=1725248
- block:
- name: create drop-in directory for service
file:
dest: /etc/systemd/system/nginx.service.d
state: directory
mode: 0755
owner: root
group: "{{ ansible_wheel }}"
- name: configure service startup dependencies
copy:
dest: /etc/systemd/system/nginx.service.d/dependency.conf
src: dependency.conf
mode: 0644
owner: root
group: "{{ ansible_wheel }}"
when: ansible_os_family == "RedHat"
- name: enable nginx service
service:
name: nginx
arguments: -u
state: started
enabled: true