Emilien Mantel
9fc4838b1b
Fix loop control
2017-11-03 11:06:57 +01:00
Emilien Mantel
3304934227
Add loop_control.label on site tasks
2017-11-03 10:56:18 +01:00
Emilien Mantel
57968b50c0
Restart nginx on SSL file writes
2017-11-03 10:30:24 +01:00
Emilien Mantel
8675d683ec
Tests with uri module ( closes #25 )
2017-10-27 15:27:16 +02:00
Emilien Mantel
10bd837f54
Setup is now 'handled'
2017-10-26 15:50:59 +02:00
Emilien Mantel
332e28a9d7
YAML cleaning
2017-10-26 15:47:30 +02:00
Emilien Mantel
4b3b857733
Remove heavy code (nginx filename) using a filter
2017-10-26 15:33:00 +02:00
Emilien Mantel
608784ca55
Fix travis
2017-10-26 11:45:20 +02:00
Emilien Mantel
36652f4742
Move upstream templates to conf.d
2017-10-26 11:09:21 +02:00
Emilien Mantel
463ce45105
New PHP management
...
- New versions (7.x)
- PHP upstream name
- Sites can use : default PHP version, select first one by PHP version,
select by upstream name
- Add PHP filter plugin
2017-10-26 11:04:38 +02:00
Emilien Mantel
de40c07ac5
Better readability
2017-10-03 17:57:35 +02:00
Emilien Mantel
54dd1ef3c0
Remove legacy code
2017-10-03 17:38:06 +02:00
Emilien Mantel
cfe27ef245
Bypasses ansible 2.4.0.0 service issue
...
On Ansible 2.4, it seems the service is not reloaded/restarted. This
commit skips errors...
2017-10-03 17:35:35 +02:00
Emilien Mantel
6f098475e5
Remove useless vagrant boxes
2017-10-03 16:52:45 +02:00
Emilien Mantel
090875cbde
Travis changes
...
- drop allow failure for stretch and ansible 2.3
- manages ansible 2.4
2017-09-26 09:44:52 +02:00
Emilien Mantel
b72263f7e5
Fix failures on travis
2017-07-27 14:56:43 +02:00
Emilien Mantel
4751eaa3c1
Add missing cont on Vagrant
2017-07-27 14:31:42 +02:00
Emilien Mantel
e83395271d
Fix tests for Debian Stretch
...
- nagios is not available
- curl can use HTTP2 (headers are lowercase)
- bypass tests when htpasswd is empty (bypass issue #28 )
2017-07-27 14:25:22 +02:00
Emilien Mantel
6935404939
Improve syntax readability
2017-07-27 12:21:10 +02:00
Emilien Mantel
acf8de8f87
Fix warning on when
2017-07-27 12:01:59 +02:00
Emilien Mantel
50e25d45b8
Elegent fail for htpasswd+stretch ( #28 related)
2017-07-27 11:50:48 +02:00
Emilien Mantel
adf53b0d95
Fix redirect_to when filename is set
2017-07-25 17:00:34 +02:00
Emilien Mantel
4d819ac2a1
Add tags to ssl and site configuration
2017-07-19 15:57:41 +02:00
Emilien Mantel
af9fa6a2c3
Update stretch vagrant box (virtualbox)
2017-06-29 15:04:59 +02:00
Emilien Mantel
4486bddb19
Add blank lines, spaces... (readability)
2017-06-14 18:00:30 +02:00
Emilien Mantel
0b99a1c28e
Remove ansible 2.3 warnings - fixes #29
2017-06-14 17:54:48 +02:00
Emilien Mantel
d616657f12
travis: missing debian stretch + ansible 2.2
2017-06-09 09:48:24 +02:00
Emilien Mantel
eb0bdcad6f
Travis major changes:
...
- Use Vagrant + Docker
- Test multiple Ansible versions
2017-06-06 14:15:03 +02:00
Emilien Mantel
3ae791ec47
Role can be fully called in check mode
2017-06-01 11:38:22 +02:00
Emilien Mantel
cbdfc741ba
Renaming variables *vhost* -> *site*
...
Vhost is an Apache configuration, not Nginx.
Manages backward compatibility.
2017-04-25 12:27:08 +02:00
Emilien Mantel
a60e81cc1f
fix redirect https : show port only if not 443
2017-04-13 15:16:53 +02:00
Emilien Mantel
f1af8991fd
Bug fix : redirect https with many names
...
On a multiple name vhost with redirect_https, redirection is done with
the origin name not the main name.
2017-04-13 14:21:14 +02:00
Emilien Mantel
fcb59fd331
no_log when deleting htpasswd files
2017-03-14 11:21:35 +01:00
Emilien Mantel
2aa9e8b6b9
load modules uses pattern *.conf
2017-03-13 10:19:07 +01:00
Emilien Mantel
7892626fc0
Load module from {{nginx_dir}}/etc/modules-enabled
2017-03-13 09:53:29 +01:00
Emilien Mantel
ae167d3317
Disabling htpasswd by setting false
2017-03-08 11:10:14 +01:00
Emilien Mantel
d8f241f79c
Fix headers quotes on nagios
2017-02-09 12:30:13 +01:00
Emilien Mantel
0e33d1b372
Auto quote headers values
2017-02-09 12:03:14 +01:00
Emilien Mantel
2cd559b87a
Fix X-XSS-Protection with quotes
2017-02-09 11:59:33 +01:00
Emilien Mantel
d550f1bab1
Read-only var: nginx_servers_default_headers
2017-02-08 16:16:19 +01:00
Emilien Mantel
021ca4e173
Auto add "X-XSS-Protection" header to servers
2017-02-08 15:59:02 +01:00
Emilien Mantel
38a8354754
Bind proxy_protocol on port
2017-01-03 12:07:31 +01:00
Emilien Mantel
1b06fe273f
Add html file to test-ssl-proxy-protocol.local
2017-01-03 11:32:45 +01:00
Emilien Mantel
684c794566
Manage proxy protocol
2017-01-03 11:16:28 +01:00
Emilien Mantel
f2cfae31b1
Update APT cache should not "change"
2016-12-08 17:34:59 +01:00
Emilien Mantel
481bcd34b1
no_log while creating SSL directories
2016-12-08 09:19:12 +01:00
Emilien Mantel
875c7cfb2e
Async task: generate dh
2016-12-07 07:48:32 +01:00
Emilien Mantel
8caddedc68
Deploy custom facts with nginx_vhosts
2016-11-29 14:32:27 +01:00
Emilien Mantel
4a3aed6974
no_log on task : Deploy SSL certs
2016-11-29 09:35:53 +01:00
Emilien Mantel
8ccc9f521f
Secure files permission
2016-11-25 11:33:20 +01:00
Emilien Mantel
5b0977567c
New feature: provide location order ( #24 related)
2016-11-23 11:44:04 +01:00
Emilien Mantel
19cdab5ba4
default vhost on HTTPS redirect
2016-11-15 17:15:39 +01:00
Emilien Mantel
999f226838
Delete useless test
2016-11-07 17:40:00 +01:00
Emilien Mantel
40f67fc103
Vhost ssl_name name is now optionnal
2016-11-07 17:22:14 +01:00
Emilien Mantel
6b1366298f
no_log on sensitive data
2016-11-02 14:48:49 +01:00
Emilien Mantel
817d56fb81
Fix redirect https on non standard port
2016-11-02 14:25:27 +01:00
Emilien Mantel
e08401acf8
vhost redirect_from accepts string
2016-11-02 14:23:55 +01:00
Emilien Mantel
0bda544a2f
Revert "nginx -t has no side effect"
...
This reverts commit 2641777abe .
2016-11-02 14:21:32 +01:00
Emilien Mantel
2641777abe
nginx -t has no side effect
2016-10-27 17:48:57 +02:00
Emilien Mantel
60a368f3e1
Manage many configurations
2016-10-13 11:11:07 +02:00
Emilien Mantel
41a5575627
Dynamic modules starts at version 1.9.11
2016-10-12 18:16:53 +02:00
Emilien Mantel
42bb4a3e2b
Dynamic module management ( closes #23 )
2016-10-12 18:13:59 +02:00
Emilien Mantel
ef3440a015
Bug fix: vhost with absent state is not deleted in sites-enabled
2016-10-10 14:35:46 +02:00
Emilien Mantel
eb704da8d8
README improvement pour vhost.filename
2016-10-07 11:01:00 +02:00
Emilien Mantel
64a9ab7c68
Better display in _base.j2 with many server_name
2016-10-07 10:57:26 +02:00
Emilien Mantel
c4ee6eb1a2
vhost.filename used by log and directories creation
2016-10-07 10:50:05 +02:00
Emilien Mantel
8789bd2c9c
Add some security rules for wordpress
2016-09-03 12:43:28 +02:00
Emilien Mantel
a2e6e98436
Add new feature: nginx_fastcgi_fix_realpath
2016-08-30 17:14:34 +02:00
Emilien Mantel
cf662acdd7
Fix condition when creating vhosts
2016-08-30 11:18:14 +02:00
Emilien Mantel
34c8d1926f
Vhost state ( closes #19 )
2016-08-30 11:06:38 +02:00
Emilien Mantel
634d88874f
Backward compatibility with nginx_php variable
2016-08-30 10:52:28 +02:00
Emilien Mantel
5e254331c4
manage php upstream version (styles) on vhost
2016-08-26 12:14:54 +02:00
Emilien Mantel
3ab8e0391c
Disable tests for owncloud (fix later)
2016-08-25 18:19:07 +02:00
Emilien Mantel
aac33b7376
better vhost for owncloud
2016-08-11 13:03:56 +02:00
Emilien Mantel
88c6c5a043
Manages PHP minor versions
2016-08-11 11:30:26 +02:00
Emilien Mantel
a9ad41b40f
Fix more block for owncloud
2016-08-11 11:09:43 +02:00
Emilien Mantel
d26b2b9a49
Fix owncloud root
2016-08-11 10:59:44 +02:00
Emilien Mantel
b17acac4c4
Tests packages on Debian
2016-08-11 10:48:12 +02:00
Emilien Mantel
c160640c7f
Force latest version of openssl when uses nginx from backports
2016-08-11 10:36:50 +02:00
Emilien Mantel
887219f86c
Force install OpenSSL from backports when nginx uses backports
2016-08-11 10:25:45 +02:00
Emilien Mantel
76c02abf47
Fix owncloud js (from php) and add tests
2016-08-11 09:38:09 +02:00
Emilien Mantel
26c93c9315
Add owncloud and prevent nginx from dotdeb
2016-08-10 21:29:03 +02:00
Emilien Mantel
8fb3829860
Drop Wheezy support in IC
2016-08-09 16:12:54 +02:00
Emilien Mantel
e4b5bb2a32
Support many php versions (php7) + drop wheezy support
2016-08-09 16:02:09 +02:00
Emilien Mantel
af3930a58a
New feature: upstream state (remove upstream if needed)
2016-05-11 17:21:52 +02:00
Emilien Mantel
4dcb5f44c6
Don't need any inventory file for tests
2016-03-23 17:27:59 +01:00
Emilien Mantel
1204dbacd1
[FreeBSD] Enable nginx service
2016-03-15 23:12:17 +01:00
Emilien Mantel
3087154335
[FreeBSD] restart nginx on vhost config changed
2016-03-15 23:00:55 +01:00
Emilien Mantel
72edbe8656
[FreeBSD] Force create log dir
2016-03-15 22:49:19 +01:00
Emilien Mantel
d49e41652c
Update cipher list (from https://cipherli.st/ )
2016-03-15 17:59:48 +01:00
Emilien Mantel
9b19231d8b
use headers instead of more
2016-03-15 17:15:46 +01:00
Emilien Mantel
80d1d82acc
Fix handler (didn't reload service after nginx -t)
2016-03-15 17:15:11 +01:00
Emilien Mantel
5445d66172
Add a wrapper: test configuration before reloading (better debugging)
2016-03-15 15:57:46 +01:00
Emilien Mantel
9a5afd09fa
Force X-Frame-Options SAMEORIGIN for Nagios ( closes #17 )
2016-03-15 15:46:49 +01:00
Emilien Mantel
96e406c791
always directive managed for add_header option
2016-03-15 15:30:22 +01:00
Emilien Mantel
02994af5ee
Default headers with always directive
2016-03-15 15:01:58 +01:00
Emilien Mantel
ee79ec9845
SSL helper can be disabled
2016-03-15 12:16:57 +01:00
Emilien Mantel
2ba906be2e
Add custom headers in vhost (moved from ssl helpers)
2016-03-15 10:51:14 +01:00
Emilien Mantel
d223f8b144
Add a check for HTTPS redirect
2016-03-15 09:22:01 +01:00
Emilien Mantel
8f837de390
Avoid double / in redirect_https
2016-03-15 09:08:52 +01:00