Add a check for HTTPS redirect

doc/vhost.md

@@ -16,7 +16,7 @@ Common
 - `redirect_from`: (O) Domain list to redirect to the first `name`. You can use this key to redirect non-www to www
 - `redirect_to`: (O) Redirect all requests to this domain. Please set scheme (http:// or https:// or $sheme).
 - `redirect_to_code`: Redirect code (default: 302)
-- `redirect_https`: (O) Boolean. Redirect HTTP to HTTPS.
+- `redirect_https`: (O) Boolean. Redirect HTTP to HTTPS. If "true", you _MUST_ set `proto` to ```['https']```.
 - `location`: (O) Add new custom locations (it does not overwrite!)
 - `more`: (O) Add more custom infos.
 - `upstream_params`: (O) Add upstream params (useful when you want to pass variables to PHP)

tasks/vhost.yml

@@ -13,6 +13,13 @@
     item.ssl_name is not defined
   with_items: "{{ nginx_vhosts }}"
 
+- name: FAIL | Check HTTPS redir and proto
+  fail: msg="You can't have HTTP proto and HTTPS redirection at the same time"
+  when: >
+    ((item.proto is defined and 'http' in item.proto) or (item.proto is not defined)) and
+    (item.redirect_http is defined and item.redirect_http)
+  with_items: "{{ nginx_vhosts }}"
+
 - name: FILE | Create root directory
   file: >
     path={{ nginx_root }}