/ansible-role-nginx

Ansible role for NGINX

MIT LicenseMIT

pyslackers.nginx

Build Status

Ansible role to install and configure NGINX.

Role Variables

The role takes a dictionary of variables:

  • nginx_custom_configurations: Dict of custom configuration set in /etc/nginx/conf.d/ansible.conf

  • nginx_sites: Dict of sites.

    • default: Set this site as default.
    • domains: List of domains serving this site.
    • template: Jinja2 template used to generate site configuration (default to etc/nginx/sites-available/site-available.j2).
    • letsencrypt: Use HTTPS and generate letsencrypt certificate for domains (use staging for the staging letsencrypt).
    • gzip_enabled: Whether or not to enable GZIP support (default: true)
    • locations: List of custom nginx locations block.
      • location: Location match.
      • static: Configure location as static and use this folder.
      • websocket: Configure location for websocket.
      • proxy_pass: Proxy destination.
      • custom: Custom configuration for location.
    • error: Dict of custom error pages.
      • error_code: Error page location

  • nginx_auth: Dict of sites where to enable basic-auth.

    • site: List of users for basic auth.
      • user: User
      • password: Password
      • state: State (default to present).

  • certbot_port: Listening port for certbot during certificates renewal (default to 32456).

Dependencies

  • pyslackers.letsencrypt: Letsencrypt certificate generation.

Example Playbook

- hosts: localhost
  vars:
    email: noreply@example.com
    nginx_custom_configurations:
      server_names_hash_bucket_size: 64
    nginx_sites:
      sirbot:
        domains:
          - sirbot.pyslackers.com
        locations:
          - location: /websocket
            websocket: true
            proxy_pass: http://127.0.0.1:5000
          - location: /custom
            proxy_pass: http://127.0.0.1:5001
            custom: |
              proxy_set_header X-Hello-World hello;
          - location: /static
            static: /var/www/my_app/static/
          - location: /
            proxy_pass: http://127.0.0.1:5000
        errors:
          404: /var/www/my_app/static/404.html
      pyslackers:
        domains:
          - pyslackers.com
        template: pyslackers.j2
    nginx_auth:
      pyslackers:
        - {name: foo, password: bar}
  roles:
    - pyslackers.nginx

License

MIT