Add proxy snippets and use nginx-light
This commit is contained in:
parent
f9473d0769
commit
a8fa5d69ff
5 changed files with 82 additions and 16 deletions
|
@ -1,18 +1,31 @@
|
|||
---
|
||||
# nginx is the proxy server
|
||||
# nginx-light contains less modules
|
||||
# but also reduces the surface of attack
|
||||
- name: Install NGINX server
|
||||
apt:
|
||||
name: nginx
|
||||
name: nginx-light
|
||||
update_cache: true
|
||||
register: apt_result
|
||||
retries: 3
|
||||
until: apt_result is succeeded
|
||||
|
||||
# Install proxy snippets
|
||||
- name: Configure NGINX proxy snippets
|
||||
template:
|
||||
src: "nginx/snippets/{{ item }}.j2"
|
||||
dest: "/etc/nginx/snippets/{{ item }}"
|
||||
mode: 0644
|
||||
loop:
|
||||
- proxy-common.conf
|
||||
- proxy-common-ssl.conf
|
||||
notify: Reload NGINX service
|
||||
|
||||
# Install sites
|
||||
- name: Configure NGINX sites
|
||||
template:
|
||||
src: nginx-sites-available.j2
|
||||
dest: /etc/nginx/sites-available/{{ item.name }}
|
||||
src: nginx/nginx-sites-available.j2
|
||||
dest: "/etc/nginx/sites-available/{{ item.name }}"
|
||||
mode: 0644
|
||||
loop: "{{ reversed_proxy_subdomains }}"
|
||||
notify: Reload NGINX service
|
||||
|
@ -27,8 +40,8 @@
|
|||
# Activate sites
|
||||
- name: Activate sites
|
||||
file:
|
||||
src: /etc/nginx/sites-available/{{ item.name }}
|
||||
dest: /etc/nginx/sites-enabled/{{ item.name }}
|
||||
src: "/etc/nginx/sites-available/{{ item.name }}"
|
||||
dest: "/etc/nginx/sites-enabled/{{ item.name }}"
|
||||
state: link
|
||||
loop: "{{ reversed_proxy_subdomains }}"
|
||||
notify: Reload NGINX service
|
||||
|
@ -36,7 +49,7 @@
|
|||
# Install main site
|
||||
- name: Configure NGINX main site
|
||||
template:
|
||||
src: nginx-sites-available-main.j2
|
||||
src: nginx/nginx-sites-available-main.j2
|
||||
dest: /etc/nginx/sites-available/main
|
||||
mode: 0644
|
||||
notify: Reload NGINX service
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue