@n3/kit

Nginx

Playbook for nginx.

Requirements

Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.

Role Variables

# install
nginx_default_release: ""
nginx_ppa_use: true
nginx_ppa_version: stable
nginx_package_name: "nginx"

# htpasswd
nginx_htpasswd: []
# - user: demo
#   password: demo

# vhosts
nginx_remove_default_vhost: true
nginx_vhosts: []
# - name: "{{ project_name }}.conf"
#   path: "{{ inventory_dir }}/templates/nginx.j2"

# nginx.conf
# nginx.conf:http
nginx_client_max_body_size: "64m"

# nginx.conf:extra
nginx_extra_conf_options: ""
# Example extra main options, used within the main nginx's context:
#   nginx_extra_conf_options: |
#     env VARIABLE;
#     include /etc/nginx/main.d/*.conf;
nginx_extra_http_options: ""
# Example extra http options, printed inside the main server http config:
#    nginx_extra_http_options: |
#      proxy_buffering    off;
#      proxy_set_header   X-Real-IP $remote_addr;
#      proxy_set_header   X-Scheme $scheme;
#      proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
#      proxy_set_header   Host $http_host;

#dhparams
nginx_dhparam: true
#nginx_dhparam_file: /etc/nginx/dhparams.pem (optional)
#nginx_dhparam_size: 4096 (optional)

# apt get-install params
proxy_env:
  http_proxy: ""
    https_proxy: ""

Dependencies

Example Playbook

- hosts: all
  roles:
    - nginx
  gather_facts: False
  pre_tasks:
    - name: Install python for Ansible
      raw: test -e /usr/bin/python || (apt -y update && apt install -y python-minimal)
      changed_when: False
    - setup: # aka gather_facts
  vars:
    nginx_vhosts:
      - name: project.conf
        path: "{{ inventory_dir }}/templates/nginx.conf.j2"
    nginx_htpasswd:
      - user: demo
        password: demo

templates/nginx.conf.j2

server {
  listen 80;
  server_name 192.168.8.143;
  default_type text/html;

  location / {
    #auth_basic           "closed site";
    #auth_basic_user_file htpasswd/demo---demo;
    return 200 "hello world1";
  }
}