Placidina/nginx

Nginx Open Source

Compile nginx using ansible.

• Nginx custom modules
  • lua-nginx-module
  • set-misc-nginx-module
  • ModSecurity-nginx
  • ngx-devel-kit
• Resty libraries:
  • lua-resty-core
  • lua-resty-lrucache
  • lua-resty-http
  • lua-resty-balancer
  • lua-resty-dns
  • lua-resty-cookie
  • lua-resty-lock
• Lua libraries:
  • cjson
• ModSecurity
• owasp-modsecurity-crs
• luarocks

---

• Build
  • Ansible
    • Vault
    • Check
    • Playbook

Build

Ansible

Build using ansible.

Vault

Create a secret for sudo password:

• ansible-vault create secret: Create a vault password
  • Add ansible_become_pass: YOUR_SUDO_PASSWORD
• echo "YOUR_VOULT_PASSWORD" > vault.txt

Check

• Ubuntu:
  • ansible-playbook --check --vault-password-file=vault.txt ubuntu-playbook.yaml

Playbook

• Ubuntu:
  • ansible-playbook --vault-password-file=vault.txt ubuntu-playbook.yaml