mirror of
https://github.com/HanXHX/ansible-nginx.git
synced 2026-02-28 09:22:10 +07:00
Compare commits
10 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
3fdc16578c | ||
|
|
1d56fc249d | ||
|
|
bfe4a315f9 | ||
|
|
9fcba824f5 | ||
|
|
d1dbdb83d4 | ||
|
|
bee0cb9a66 | ||
|
|
6be44c7da8 | ||
|
|
a0a6e35a3a | ||
|
|
f57ab08594 | ||
|
|
d26a6f26f5 |
@@ -44,6 +44,7 @@ Socket:
|
|||||||
- `nginx_worker_processes`
|
- `nginx_worker_processes`
|
||||||
- `nginx_events`: key/value in events block
|
- `nginx_events`: key/value in events block
|
||||||
- `nginx_http`: key/value in http block
|
- `nginx_http`: key/value in http block
|
||||||
|
- `nginx_pid`: daemon pid file
|
||||||
|
|
||||||
### Vhost management
|
### Vhost management
|
||||||
|
|
||||||
@@ -54,7 +55,7 @@ You can see many examples in: [tests/test.yml](tests/test.yml).
|
|||||||
#### Common
|
#### Common
|
||||||
|
|
||||||
- `name`: (M) Domain or list of domain used.
|
- `name`: (M) Domain or list of domain used.
|
||||||
- `template`: (M) template used to create vhost
|
- `template`: (M) template used to create vhost. Optional if you set `delete` to true.
|
||||||
- `enable`: (O) Enable the vhost (default is true)
|
- `enable`: (O) Enable the vhost (default is true)
|
||||||
- `delete`: (O) Delete the vhost (default is false)
|
- `delete`: (O) Delete the vhost (default is false)
|
||||||
- `redirect_from`: (O) Domain list to redirect to the first `name`. You can use this key to redirect non-www to www
|
- `redirect_from`: (O) Domain list to redirect to the first `name`. You can use this key to redirect non-www to www
|
||||||
@@ -138,6 +139,4 @@ GPLv2
|
|||||||
Author Information
|
Author Information
|
||||||
------------------
|
------------------
|
||||||
|
|
||||||
- You can find many other roles in my GitHub "lab": https://github.com/HanXHX/my-ansible-playbooks
|
- Twitter: https://twitter.com/hanxhx
|
||||||
- All issues, pull-request are welcome :)
|
|
||||||
|
|
||||||
|
|||||||
@@ -8,8 +8,9 @@ nginx_apt_package: nginx-full
|
|||||||
nginx_root: "/srv/www"
|
nginx_root: "/srv/www"
|
||||||
nginx_log_dir: '/var/log/nginx'
|
nginx_log_dir: '/var/log/nginx'
|
||||||
nginx_ssl_dir: '/etc/nginx/ssl'
|
nginx_ssl_dir: '/etc/nginx/ssl'
|
||||||
|
nginx_pid: '/run/nginx.pid'
|
||||||
nginx_resolver:
|
nginx_resolver:
|
||||||
hosts: ['208.67.222.222', '208.67.220.220'] # OpenDNS
|
hosts: ['8.8.8.8', '8.8.4.4'] # OpenDNS
|
||||||
valid: '300'
|
valid: '300'
|
||||||
timeout: '5'
|
timeout: '5'
|
||||||
nginx_error_log_level: 'warn' # http://nginx.org/en/docs/ngx_core_module.html#error_log
|
nginx_error_log_level: 'warn' # http://nginx.org/en/docs/ngx_core_module.html#error_log
|
||||||
|
|||||||
@@ -1,6 +1,4 @@
|
|||||||
---
|
---
|
||||||
- name: restart nginx
|
|
||||||
action: service name=nginx state=restarted enabled=yes
|
|
||||||
|
|
||||||
- name: reload nginx
|
- name: reload nginx
|
||||||
action: service name=nginx state=reloaded enabled=yes
|
action: service name=nginx state=reloaded enabled=yes
|
||||||
|
|||||||
@@ -4,7 +4,7 @@ galaxy_info:
|
|||||||
description: Nginx for Debian
|
description: Nginx for Debian
|
||||||
company:
|
company:
|
||||||
license: GPLv2
|
license: GPLv2
|
||||||
min_ansible_version: 1.2
|
min_ansible_version: 1.6
|
||||||
platforms:
|
platforms:
|
||||||
- name: Debian
|
- name: Debian
|
||||||
versions:
|
versions:
|
||||||
|
|||||||
@@ -9,8 +9,10 @@
|
|||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
- name: TEMPLATE | Deploy nginx.conf
|
- name: TEMPLATE | Deploy nginx.conf
|
||||||
template: src=etc/nginx/nginx.conf.j2 dest=/etc/nginx/nginx.conf validate= "nginx -t"
|
template: >
|
||||||
notify: restart nginx
|
src=etc/nginx/nginx.conf.j2
|
||||||
|
dest=/etc/nginx/nginx.conf
|
||||||
|
notify: reload nginx
|
||||||
|
|
||||||
- name: FILE | Create /etc/nginx/helpers
|
- name: FILE | Create /etc/nginx/helpers
|
||||||
file: dest=/etc/nginx/helpers owner=root mode=0755 state=directory
|
file: dest=/etc/nginx/helpers owner=root mode=0755 state=directory
|
||||||
@@ -24,7 +26,9 @@
|
|||||||
# creates: "{{ nginx_dh_path }}"
|
# creates: "{{ nginx_dh_path }}"
|
||||||
|
|
||||||
- name: TEMPLATE | Deploy all helpers
|
- name: TEMPLATE | Deploy all helpers
|
||||||
template: src={{ item }} dest=/etc/nginx/helpers/{{ item | basename | regex_replace('\.j2$','') }}
|
template: >
|
||||||
|
src={{ item }}
|
||||||
|
dest=/etc/nginx/helpers/{{ item | basename | regex_replace('\.j2$','') }}
|
||||||
with_fileglob: '../templates/etc/nginx/helpers/*.j2'
|
with_fileglob: '../templates/etc/nginx/helpers/*.j2'
|
||||||
notify: reload nginx
|
notify: reload nginx
|
||||||
|
|
||||||
|
|||||||
@@ -1,6 +1,24 @@
|
|||||||
---
|
---
|
||||||
|
|
||||||
|
- name: FILE | Create root directory
|
||||||
|
file: >
|
||||||
|
path={{ nginx_root }}
|
||||||
|
state=directory
|
||||||
|
|
||||||
- name: FILE | Create root folders (foreach nginx_vhosts)
|
- name: FILE | Create root folders (foreach nginx_vhosts)
|
||||||
|
file: >
|
||||||
|
path={{ nginx_root }}/{{ item.name if item.name is string else item.name[0] }}
|
||||||
|
state=directory
|
||||||
|
owner={{ item.owner | default('www-data') }}
|
||||||
|
group={{ item.group | default('www-data') }}
|
||||||
|
mode={{ item.mode | default('0755') }}
|
||||||
|
with_items: nginx_vhosts
|
||||||
|
when: >
|
||||||
|
item.root is not defined and
|
||||||
|
(item.template is defined and item.template != '_proxy') and
|
||||||
|
(item.delete is not defined or not item.delete)
|
||||||
|
|
||||||
|
- name: FILE | Create root public folders (foreach nginx_vhosts)
|
||||||
file: >
|
file: >
|
||||||
path={{ nginx_root }}/{{ item.name if item.name is string else item.name[0] }}/public
|
path={{ nginx_root }}/{{ item.name if item.name is string else item.name[0] }}/public
|
||||||
state=directory
|
state=directory
|
||||||
@@ -8,7 +26,10 @@
|
|||||||
group={{ item.group | default('www-data') }}
|
group={{ item.group | default('www-data') }}
|
||||||
mode={{ item.mode | default('0755') }}
|
mode={{ item.mode | default('0755') }}
|
||||||
with_items: nginx_vhosts
|
with_items: nginx_vhosts
|
||||||
when: item.root is not defined and item.template != '_proxy'
|
when: >
|
||||||
|
item.root is not defined and
|
||||||
|
(item.template is defined and item.template != '_proxy') and
|
||||||
|
(item.delete is not defined or not item.delete)
|
||||||
|
|
||||||
- name: TEMPLATE | Create vhosts
|
- name: TEMPLATE | Create vhosts
|
||||||
template: >
|
template: >
|
||||||
@@ -23,8 +44,7 @@
|
|||||||
# with_fileglob: "web/*"
|
# with_fileglob: "web/*"
|
||||||
|
|
||||||
- name: FILE | Delete vhosts
|
- name: FILE | Delete vhosts
|
||||||
file: dest=/etc/nginx/sites-enabled/{{ item.name if item.name is string else item.name[0] }} state=absent
|
file: path=/etc/nginx/sites-available/{{ item.name if item.name is string else item.name[0] }} state=absent
|
||||||
file: dest=/etc/nginx/sites-available/{{ item.name if item.name is string else item.name[0] }} state=absent
|
|
||||||
with_items: nginx_vhosts
|
with_items: nginx_vhosts
|
||||||
notify: reload nginx
|
notify: reload nginx
|
||||||
when: item.delete is defined and item.delete
|
when: item.delete is defined and item.delete
|
||||||
@@ -42,10 +62,10 @@
|
|||||||
(item.delete is not defined or not item.delete)
|
(item.delete is not defined or not item.delete)
|
||||||
|
|
||||||
- name: FILE | Disable vhosts
|
- name: FILE | Disable vhosts
|
||||||
file: dest=/etc/nginx/sites-enabled/{{ item.name if item.name is string else item.name[0] }} state=absent
|
file: path=/etc/nginx/sites-enabled/{{ item.name if item.name is string else item.name[0] }} state=absent
|
||||||
with_items: nginx_vhosts
|
with_items: nginx_vhosts
|
||||||
notify: reload nginx
|
notify: reload nginx
|
||||||
when: item.enable is defined and not item.enable
|
when: (item.enable is defined and not item.enable) or (item.delete is defined and item.delete)
|
||||||
|
|
||||||
#- name: FILE | Create ssl dir per vhost (if needed)
|
#- name: FILE | Create ssl dir per vhost (if needed)
|
||||||
# file: dest=/etc/nginx/ssl/{{ item.name }} owner=root mode=0750 state=directory
|
# file: dest=/etc/nginx/ssl/{{ item.name }} owner=root mode=0750 state=directory
|
||||||
|
|||||||
@@ -4,7 +4,7 @@
|
|||||||
|
|
||||||
user {{ nginx_user }};
|
user {{ nginx_user }};
|
||||||
worker_processes {{ nginx_worker_processes }};
|
worker_processes {{ nginx_worker_processes }};
|
||||||
pid /run/nginx.pid;
|
pid {{ nginx_pid }};
|
||||||
|
|
||||||
events {
|
events {
|
||||||
{% for key, value in nginx_events.iteritems() %}
|
{% for key, value in nginx_events.iteritems() %}
|
||||||
|
|||||||
@@ -28,11 +28,13 @@ server {
|
|||||||
{% endfor %}
|
{% endfor %}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
|
{% if not __location.has_key('/') %}
|
||||||
location / {
|
location / {
|
||||||
{% block template_try_files %}
|
{% block template_try_files %}
|
||||||
try_files {{ override_try_files | default('$uri $uri/ =404') }};
|
try_files {{ override_try_files | default('$uri $uri/ =404') }};
|
||||||
{% endblock %}
|
{% endblock %}
|
||||||
}
|
}
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
{% block template_upstream_location %}
|
{% block template_upstream_location %}
|
||||||
{% endblock %}
|
{% endblock %}
|
||||||
|
|||||||
@@ -2,5 +2,3 @@ FROM williamyeh/ansible:debian8-onbuild
|
|||||||
|
|
||||||
RUN apt-get update
|
RUN apt-get update
|
||||||
CMD ["sh", "tests/test.sh"]
|
CMD ["sh", "tests/test.sh"]
|
||||||
|
|
||||||
EXPOSE 6379
|
|
||||||
|
|||||||
@@ -2,5 +2,3 @@ FROM williamyeh/ansible:debian7-onbuild
|
|||||||
|
|
||||||
RUN apt-get update
|
RUN apt-get update
|
||||||
CMD ["sh", "tests/test.sh"]
|
CMD ["sh", "tests/test.sh"]
|
||||||
|
|
||||||
EXPOSE 6379
|
|
||||||
|
|||||||
@@ -30,6 +30,11 @@
|
|||||||
- 'return 403;'
|
- 'return 403;'
|
||||||
'/gunther':
|
'/gunther':
|
||||||
- 'return 404;'
|
- 'return 404;'
|
||||||
|
- name: 'test-location.local'
|
||||||
|
template: '_base'
|
||||||
|
location:
|
||||||
|
'/':
|
||||||
|
- 'alias /var/tmp;'
|
||||||
- name: 'test-php.local'
|
- name: 'test-php.local'
|
||||||
upstream_params:
|
upstream_params:
|
||||||
- 'fastcgi_param FOO bar;'
|
- 'fastcgi_param FOO bar;'
|
||||||
@@ -44,7 +49,6 @@
|
|||||||
template: '_proxy'
|
template: '_proxy'
|
||||||
upstream_name: 'test'
|
upstream_name: 'test'
|
||||||
- name: 'deleted.local'
|
- name: 'deleted.local'
|
||||||
template: '_base'
|
|
||||||
delete: true
|
delete: true
|
||||||
roles:
|
roles:
|
||||||
- ../../
|
- ../../
|
||||||
@@ -53,9 +57,10 @@
|
|||||||
copy: dest="{{ nginx_root }}/{{ item }}/public/index.php" content="<?php phpinfo();"
|
copy: dest="{{ nginx_root }}/{{ item }}/public/index.php" content="<?php phpinfo();"
|
||||||
with_items: ['test-php.local', 'test-php-index.local']
|
with_items: ['test-php.local', 'test-php-index.local']
|
||||||
- name: -- Add HTML file --
|
- name: -- Add HTML file --
|
||||||
copy: dest="{{ nginx_root }}/test.local/public/index.html" content="Index HTML test OK\n"
|
copy: dest="{{ item }}/index.html" content="Index HTML test OK\n"
|
||||||
|
with_items: ['{{ nginx_root }}/test.local/public', '/var/tmp']
|
||||||
- name: -- VERIFY VHOSTS --
|
- name: -- VERIFY VHOSTS --
|
||||||
shell: "curl -H 'Host: {{ item.name if item.name is string else item.name[0] }}' http://127.0.0.1{% if item.listen is defined %}:{{ item.listen[0] }}{% endif %}/"
|
command: "curl -H 'Host: {{ item.name if item.name is string else item.name[0] }}' http://127.0.0.1{% if item.listen is defined %}:{{ item.listen[0] }}{% endif %}/"
|
||||||
with_items: nginx_vhosts
|
with_items: nginx_vhosts
|
||||||
when: item.delete is undefined or not item.delete
|
when: item.delete is undefined or not item.delete
|
||||||
changed_when: false
|
changed_when: false
|
||||||
@@ -65,7 +70,7 @@
|
|||||||
failed_when: f.stdout.find('403 Forbidden') == -1
|
failed_when: f.stdout.find('403 Forbidden') == -1
|
||||||
changed_when: false
|
changed_when: false
|
||||||
- name: -- VERIFY REDIRECT VHOSTS --
|
- name: -- VERIFY REDIRECT VHOSTS --
|
||||||
shell: "curl -H 'Host: {{ item.redirect_from[0] }}' http://127.0.0.1/"
|
command: "curl -H 'Host: {{ item.redirect_from[0] }}' http://127.0.0.1/"
|
||||||
with_items: nginx_vhosts
|
with_items: nginx_vhosts
|
||||||
when: item.redirect_from is defined and (item.delete is undefined or not item.delete)
|
when: item.redirect_from is defined and (item.delete is undefined or not item.delete)
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|||||||
Reference in New Issue
Block a user