Add proxy snippets and use nginx-light

This commit is contained in:
Alexandre Iooss 2019-03-14 10:53:44 +01:00
parent f9473d0769
commit a8fa5d69ff
5 changed files with 82 additions and 16 deletions

View file

@ -1,18 +1,31 @@
---
# nginx is the proxy server
# nginx-light contains less modules
# but also reduces the surface of attack
- name: Install NGINX server
apt:
name: nginx
name: nginx-light
update_cache: true
register: apt_result
retries: 3
until: apt_result is succeeded
# Install proxy snippets
- name: Configure NGINX proxy snippets
template:
src: "nginx/snippets/{{ item }}.j2"
dest: "/etc/nginx/snippets/{{ item }}"
mode: 0644
loop:
- proxy-common.conf
- proxy-common-ssl.conf
notify: Reload NGINX service
# Install sites
- name: Configure NGINX sites
template:
src: nginx-sites-available.j2
dest: /etc/nginx/sites-available/{{ item.name }}
src: nginx/nginx-sites-available.j2
dest: "/etc/nginx/sites-available/{{ item.name }}"
mode: 0644
loop: "{{ reversed_proxy_subdomains }}"
notify: Reload NGINX service
@ -27,8 +40,8 @@
# Activate sites
- name: Activate sites
file:
src: /etc/nginx/sites-available/{{ item.name }}
dest: /etc/nginx/sites-enabled/{{ item.name }}
src: "/etc/nginx/sites-available/{{ item.name }}"
dest: "/etc/nginx/sites-enabled/{{ item.name }}"
state: link
loop: "{{ reversed_proxy_subdomains }}"
notify: Reload NGINX service
@ -36,7 +49,7 @@
# Install main site
- name: Configure NGINX main site
template:
src: nginx-sites-available-main.j2
src: nginx/nginx-sites-available-main.j2
dest: /etc/nginx/sites-available/main
mode: 0644
notify: Reload NGINX service