radityo
/
ansible-nginx
mirror of https://github.com/HanXHX/ansible-nginx.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Mirror HanXHX/ansible-nginx dari GitHub.
222 Commits
4 Branches
37 Tags
595 KiB
Jinja 88.7%
Python 11.3%
 
 
Go to file
Emilien Mantel adf53b0d95 Fix redirect_to when filename is set 2017-07-25 17:00:34 +02:00
defaults Renaming variables *vhost* -> *site* 2017-04-25 12:27:08 +02:00
doc Renaming variables *vhost* -> *site* 2017-04-25 12:27:08 +02:00
handlers Revert "nginx -t has no side effect" 2016-11-02 14:21:32 +01:00
meta Travis major changes: 2017-06-06 14:15:03 +02:00
tasks Add tags to ssl and site configuration 2017-07-19 15:57:41 +02:00
templates/etc Fix redirect_to when filename is set 2017-07-25 17:00:34 +02:00
tests Add blank lines, spaces... (readability) 2017-06-14 18:00:30 +02:00
vars Renaming variables *vhost* -> *site* 2017-04-25 12:27:08 +02:00
.gitignore Gitignore *.retry 2016-03-05 11:06:34 +01:00
.travis.yml travis: missing debian stretch + ansible 2.2 2017-06-09 09:48:24 +02:00
LICENSE Initial commit 2015-07-15 12:12:06 +02:00
README.md Renaming variables *vhost* -> *site* 2017-04-25 12:27:08 +02:00
Vagrantfile Update stretch vagrant box (virtualbox) 2017-06-29 15:04:59 +02:00

README.md

Nginx for Debian/FreeBSD Ansible role

Ansible Galaxy Build Status

Install and configure Nginx on Debian/FreeBSD.

Features:

  • SSL/TLS "hardened" support
  • Manage basic auth on site / location
  • Proxy + Upstream
  • Fast PHP configuration
  • Preconfigured site templates (should work on many app)
  • Auto-configure HTTP2 on SSL/TLS sites
  • Manage dynamic modules (install and loading)
  • Deploy custom facts.d with sites config
  • Can listen with proxy protocol

Requirements

None. If you set true to nginx_backports, you must install backports repository before lauching this role.

Role Variables

Packaging

Debian:

  • nginx_apt_package: APT nginx package (try: apt-cache search ^nginx)
  • nginx_backports: Install nginx from backport repository (bool)

FreeBSD:

  • nginx_pkgng_package: PKGNG nginx package (should be "nginx" or "nginx-devel")

Shared

  • nginx_root: root directory where you want to have your files
  • nginx_log_dir: log directory (if you change it, don't forget to change logrotate config)
  • nginx_resolver: list of DNS resolver (default: OpenDNS)
  • nginx_error_log_level: default log level
  • nginx_auto_config_httpv2: boolean, auto configure HTTP2 where possible
  • nginx_fastcgi_fix_realpath: boolean, use realpath for fastcgi (fix problems with symlinks and PHP opcache)

Nginx Configuration

  • nginx_user
  • nginx_worker_processes
  • nginx_pid: daemon pid file
  • nginx_events_*: all variables in events block
  • nginx_http_*: all variables in http block
  • nginx_custom_http: instructions list (will put data in /etc/nginx/conf.d/custom.conf)
  • nginx_dyn_modules: dynamic module list to load

About modules

Last updates from Debian backports loads modules from /etc/nginx/modules-enabled directory. Disabling/Enabling is not supported anymore. Please wait further update.

Fine configuration

Site configuration

PHP configuration

Upstream Configuration

SSL/TLS Configuration

Basic Auth

FreeBSD

Note

  • Active support for Debian.
  • FreeBSD support is experimental (no Travis). I only test (for the moment) 10.2 (but it can work on other versions).
  • I don't manage BackupPC for FreeBSD (PR welcome).

Dependencies

None

Example Playbook

See tests/test.yml.

License

GPLv2

Author Information