86 lines
1.8 KiB
YAML
86 lines
1.8 KiB
YAML
---
|
|
- name: setup nginx base configuration
|
|
become: true
|
|
copy:
|
|
src: files/nginx/nginx.conf
|
|
dest: /etc/nginx/nginx.conf
|
|
mode: 0644
|
|
notify: restart_nginx
|
|
tags: http
|
|
|
|
- name: setup nginx directories
|
|
become: true
|
|
file:
|
|
path: "/etc/nginx/{{ item }}"
|
|
state: directory
|
|
mode: 0755
|
|
loop:
|
|
- sites-enabled
|
|
- sites-available
|
|
tags: http
|
|
|
|
- name: ensure http/s directories exist
|
|
become: true
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
owner: http
|
|
group: http
|
|
loop:
|
|
- /srv/http
|
|
- /srv/http/letsencrypt
|
|
tags: http
|
|
|
|
- name: chown http user home
|
|
become: true
|
|
file:
|
|
path: /srv/http
|
|
owner: http
|
|
group: http
|
|
recurse: true
|
|
tags: http
|
|
|
|
- name: template nginx http sites-available
|
|
become: true
|
|
template:
|
|
src: "templates/nginx/sites/{{ item }}.j2"
|
|
dest: "/etc/nginx/sites-available/{{ item }}"
|
|
mode: 0644
|
|
loop:
|
|
- "{{ ci_server_name }}.http.conf"
|
|
- "{{ pi_server_name }}.conf"
|
|
- "{{ home_server_name }}.conf"
|
|
- "{{ assistant_server_name }}.conf"
|
|
- "{{ video_server_name }}.conf"
|
|
- "{{ parts_server_name }}.conf"
|
|
notify: restart_nginx
|
|
tags: http
|
|
|
|
- name: remove pihole from sites-enabled if there
|
|
become: true
|
|
file:
|
|
path: "/etc/nginx/sites-enabled/pi.hole.conf"
|
|
state: absent
|
|
tags: http
|
|
|
|
- name: enable desired nginx http sites
|
|
become: true
|
|
file:
|
|
src: "/etc/nginx/sites-available/{{ item }}"
|
|
dest: "/etc/nginx/sites-enabled/{{ item }}"
|
|
state: link
|
|
loop:
|
|
- "{{ ci_server_name }}.http.conf"
|
|
- "{{ pi_server_name }}.conf"
|
|
- "{{ parts_server_name }}.conf"
|
|
- "{{ home_server_name }}.conf"
|
|
- "{{ assistant_server_name }}.conf"
|
|
- "{{ video_server_name }}.conf"
|
|
notify: restart_nginx
|
|
tags: http
|
|
|
|
- name: validate nginx configurations
|
|
become: true
|
|
shell: nginx -t
|
|
tags: http
|