88 lines
3.3 KiB
YAML
88 lines
3.3 KiB
YAML
---
|
|
|
|
- name: FILE | Create root directory
|
|
file: >
|
|
path={{ nginx_root }}
|
|
state=directory
|
|
|
|
- name: FILE | Create root folders (foreach nginx_vhosts)
|
|
file: >
|
|
path={{ nginx_root }}/{{ item.name if item.name is string else item.name[0] }}
|
|
state=directory
|
|
owner={{ item.owner | default('www-data') }}
|
|
group={{ item.group | default('www-data') }}
|
|
mode={{ item.mode | default('0755') }}
|
|
with_items: nginx_vhosts
|
|
when: >
|
|
item.root is not defined and
|
|
(item.template is defined and item.template != '_proxy') and
|
|
(item.delete is not defined or not item.delete) and
|
|
item.redirect_to is not defined
|
|
|
|
- name: FILE | Create root public folders (foreach nginx_vhosts)
|
|
file: >
|
|
path={{ nginx_root }}/{{ item.name if item.name is string else item.name[0] }}/public
|
|
state=directory
|
|
owner={{ item.owner | default('www-data') }}
|
|
group={{ item.group | default('www-data') }}
|
|
mode={{ item.mode | default('0755') }}
|
|
with_items: nginx_vhosts
|
|
when: >
|
|
item.root is not defined and
|
|
(item.template is defined and item.template != '_proxy') and
|
|
(item.delete is not defined or not item.delete) and
|
|
item.redirect_to is not defined
|
|
|
|
- name: TEMPLATE | Create vhosts
|
|
template: >
|
|
src=etc/nginx/sites-available/{{ item.template if item.redirect_to is not defined else '_redirect' }}.j2
|
|
dest=/etc/nginx/sites-available/{{ item.name if item.name is string else item.name[0] }}
|
|
with_items: nginx_vhosts
|
|
notify: reload nginx
|
|
when: item.delete is not defined or not item.delete
|
|
|
|
#- name: COPY | Add index.html / index.php
|
|
# copy: src={{ item }} dest={{ nginx_root }}/{{ item.name }}/public/{{ item }} owner=www-data group=www-data mode=0666
|
|
# with_fileglob: "web/*"
|
|
|
|
- name: FILE | Delete vhosts
|
|
file: path=/etc/nginx/sites-available/{{ item.name if item.name is string else item.name[0] }} state=absent
|
|
with_items: nginx_vhosts
|
|
notify: reload nginx
|
|
when: item.delete is defined and item.delete
|
|
|
|
- name: FILE | Enable vhosts
|
|
file: >
|
|
src=/etc/nginx/sites-available/{{ item.name if item.name is string else item.name[0] }}
|
|
dest=/etc/nginx/sites-enabled/{{ item.name if item.name is string else item.name[0] }}
|
|
state=link
|
|
with_items: nginx_vhosts
|
|
notify: reload nginx
|
|
when: >
|
|
((item.enable is not defined) or
|
|
(item.enable is defined and item.enable)) and
|
|
(item.delete is not defined or not item.delete)
|
|
|
|
- name: FILE | Disable vhosts
|
|
file: path=/etc/nginx/sites-enabled/{{ item.name if item.name is string else item.name[0] }} state=absent
|
|
with_items: nginx_vhosts
|
|
notify: reload nginx
|
|
when: (item.enable is defined and not item.enable) or (item.delete is defined and item.delete)
|
|
|
|
#- name: FILE | Create ssl dir per vhost (if needed)
|
|
# file: dest=/etc/nginx/ssl/{{ item.name }} owner=root mode=0750 state=directory
|
|
# with_items: nginx_vhosts
|
|
# when: item.ssl.use is defined and item.ssl.use
|
|
|
|
# TODO...
|
|
#- name: COPY | Deploy SSL keys if needed
|
|
# copy: src=keys/{{ item.name }}/{{ item.name }}.crt dest=/etc/nginx/ssl/{{ item.name }} mode=660
|
|
# copy: src=keys/{{ item.name }}/{{ item.name }}.key dest=/etc/nginx/ssl/{{ item.name }} mode=660
|
|
# with_items: nginx_vhosts
|
|
# when: item.ssl.use and not generatekey
|
|
|
|
# TODO:
|
|
# - deploy defaults files (index.html/index.php) allready in files/
|
|
# - work with role "ssl_autosign"
|
|
|