Mirror HanXHX/ansible-nginx dari GitHub.
 
 
Go to file
Emilien Mantel 8789bd2c9c Add some security rules for wordpress 2016-09-03 12:43:28 +02:00
defaults Add new feature: nginx_fastcgi_fix_realpath 2016-08-30 17:14:34 +02:00
doc Vhost state (closes #19) 2016-08-30 11:06:38 +02:00
handlers [FreeBSD] restart nginx on vhost config changed 2016-03-15 23:00:55 +01:00
meta Support many php versions (php7) + drop wheezy support 2016-08-09 16:02:09 +02:00
tasks Add new feature: nginx_fastcgi_fix_realpath 2016-08-30 17:14:34 +02:00
templates/etc/nginx Add some security rules for wordpress 2016-09-03 12:43:28 +02:00
tests Vhost state (closes #19) 2016-08-30 11:06:38 +02:00
vars Manages PHP minor versions 2016-08-11 11:30:26 +02:00
.gitignore Gitignore *.retry 2016-03-05 11:06:34 +01:00
.travis.yml Drop Wheezy support in IC 2016-08-09 16:12:54 +02:00
LICENSE Initial commit 2015-07-15 12:12:06 +02:00
README.md Add new feature: nginx_fastcgi_fix_realpath 2016-08-30 17:14:34 +02:00
Vagrantfile Support many php versions (php7) + drop wheezy support 2016-08-09 16:02:09 +02:00

README.md

Nginx for Debian/FreeBSD Ansible role

Ansible Galaxy Build Status

Install and configure Nginx on Debian/FreeBSD.

Features:

  • SSL/TLS "hardened" support
  • Manage basic auth on vhost / location
  • Proxy + Upstream
  • Fast PHP configuration
  • Preconfigured vhost templates (should work on many app)
  • Auto-configure HTTP2 on SSL/TLS vhosts

Requirements

None. If you set true to nginx_backports, you must install backports repository before lauching this role.

Role Variables

Packaging

Debian:

  • nginx_apt_package: APT nginx package (try: apt-cache search ^nginx)
  • nginx_backports: Install nginx from backport repository (bool)

FreeBSD:

  • nginx_pkgng_package: PKGNG nginx package (should be "nginx" or "nginx-devel")

Shared

  • nginx_root: root directory where you want to have your files
  • nginx_log_dir: log directory (if you change it, don't forget to change logrotate config)
  • nginx_resolver: list of DNS resolver (default: OpenDNS)
  • nginx_error_log_level: default log level
  • nginx_auto_config_httpv2: boolean, auto configure HTTP2 where possible
  • nginx_fastcgi_fix_realpath: boolean, use realpath for fastcgi (fix problems with symlinks and PHP opcache)

Nginx Configuration

  • nginx_user
  • nginx_worker_processes
  • nginx_pid: daemon pid file
  • nginx_events_*: all variables in events block
  • nginx_http_*: all variables in http block
  • nginx_custom_http: instructions list (will put data in /etc/nginx/conf.d/custom.conf)

Fine configuration

Vhost configuration

PHP configuration

Upstream Configuration

SSL/TLS Configuration

Basic Auth

FreeBSD

Note

  • Active support for Debian.
  • FreeBSD support is experimental (no Travis). I only test (for the moment) 10.2 (but it can work on other versions).
  • I don't manage BackupPC for FreeBSD (PR welcome).

Dependencies

None

Example Playbook

See tests/test.yml.

License

GPLv2

Author Information