statio/ansible-role-nginx

Ansible role for installing NGINX

👾 Help make the NGINX Ansible role better by participating in our survey! 👾

Ansible NGINX Role

This role installs NGINX Open Source, NGINX Plus, NGINX Agent or the NGINX Amplify agent on your target host.

Note: This role is still in active development. There may be unidentified issues and the role variables may change as development continues.

Requirements

NGINX Plus (Optional)

If you wish to install NGINX Plus using this role, you will need to obtain an NGINX Plus license beforehand. You do not need to do anything beforehand if you want to install NGINX OSS.

Ansible

• This role is developed and tested with maintained versions of Ansible core (above 2.12).

• When using Ansible core, you will also need to install the following collections:

  ---
  collections:
    - name: ansible.posix
      version: 1.5.4
    - name: community.general
      version: 6.4.0
    - name: community.crypto # Only required if you plan to install NGINX Plus
      version: 2.14.1
    - name: community.docker # Only required if you plan to use Molecule (see below)
      version: 3.4.7

  Note: You can alternatively install the Ansible community distribution (what is known as the "old" Ansible) if you don't want to manage individual collections.

• You will need to run this role as a root user using Ansible's become parameter. Make sure you have set up the appropriate permissions on your target hosts.

• Instructions on how to install Ansible can be found in the Ansible website.

Jinja2

• This role uses Jinja2 templates. Ansible core installs Jinja2 by default, but depending on your install and/or upgrade path, you might be running an outdated version of Jinja2. The minimum version of Jinja2 required for the role to properly function is 3.1.
• Instructions on how to install Jinja2 can be found in the Jinja2 website.

Molecule (Optional)

• Molecule is used to test the various functionalities of the role. The recommended version of Molecule to test this role is 4.x.

• Instructions on how to install Molecule can be found in the Molecule website. You will also need to install the Molecule Docker driver.

• To run the NGINX Plus Molecule tests, you must copy your NGINX Plus license to the role's files/license directory.

  You can alternatively add your NGINX Plus repository certificate and key to the local environment. Run the following commands to export these files as base64-encoded variables and execute the Molecule tests:

  export NGINX_CRT=$( cat <path to your certificate file> | base64 )
  export NGINX_KEY=$( cat <path to your key file> | base64 )
  molecule test -s plus

Installation

This role can be installed via either Ansible Galaxy (the Ansible community marketplace) or by cloning this repo. Once installed, you will need to include the role it in your Ansible playbook using the roles keyword, the import_role module, or the include_role module.

Ansible Galaxy

To install the latest stable release of the role on your system, use:

ansible-galaxy install nginxinc.nginx

Alternatively, if you have already installed the role, you can update the role to the latest release by using:

ansible-galaxy install -f nginxinc.nginx

To use the role, include the following task in your playbook:

- name: Install NGINX
  ansible.builtin.include_role:
    name: nginxinc.nginx

Git

To pull the latest edge commit of the role from GitHub, use:

git clone https://github.com/nginxinc/ansible-role-nginx.git

To use the role, include the following task in your playbook:

- name: Install NGINX
  ansible.builtin.include_role:
    name: <path/to/repo> # e.g. <roles/ansible-role-nginx> if you clone the repo inside your project's roles directory

Platforms

The NGINX Ansible role supports almost all platforms supported by NGINX Open Source, NGINX Plus, the NGINX Agent, and the NGINX Amplify agent:

NGINX Open Source

AlmaLinux:
  - 8
  - 9
Alpine:
  - 3.16
  - 3.17
  - 3.18
  - 3.19
Amazon Linux:
  - 2
  - 2023
CentOS:
  - 7.4+
Debian:
  - bullseye (11)
  - bookworm (12)
Oracle Linux:
  - 7
  - 8
  - 9
Red Hat:
  - 7.4+
  - 8
  - 9
Rocky Linux:
  - 8
  - 9
SUSE/SLES:
  - 12
  - 15
Ubuntu:
  - focal (20.04)
  - jammy (22.04)
  - mantic (23.10)
  - noble (24.04)

NGINX Plus

AlmaLinux:
  - 8
  - 9
Alpine:
  - 3.16
  - 3.17
  - 3.18
  - 3.19
Amazon Linux:
  - 2
  - 2023
CentOS:
  - 7.4+
Debian:
  - bullseye (11)
  - bookworm (12)
FreeBSD:
  - 12.1+
  - 13
  - 14
Oracle Linux:
  - 7.4+
  - 8.1+
  - 9
Red Hat:
  - 7.4+
  - 8.1+
  - 9
Rocky Linux:
  - 8
  - 9
SUSE/SLES:
  - 12
  - 15
Ubuntu:
  - focal (20.04)
  - jammy (22.04)
  - noble (24.04)

NGINX Agent

AlmaLinux:
  - 8
  - 9
Alpine:
  - 3.16
  - 3.17
  - 3.18
  - 3.19
Amazon Linux:
  - 2
  - 2023
Debian:
  - bullseye (11)
  - bookwork (12)
CentOS:
  - 7.4+
FreeBSD:
  - 13
  - 14
Oracle Linux:
  - 7.4+
  - 8
  - 9
Red Hat:
  - 7
  - 8
  - 9
Rocky Linux:
  - 8
  - 9
SUSE/SLES:
  - 12
  - 15
Ubuntu:
  - focal (20.04)
  - jammy (22.04)

NGINX Amplify Agent

Amazon Linux:
  - 2
Debian:
  - buster (10)
  - bullseye (11)
Red Hat:
  - 8
  - 9
Ubuntu:
  - bionic (18.04)
  - focal (20.04)
  - jammy (22.04)

Note: At your own risk, you can also use this role to compile NGINX Open Source from source, install NGINX Open Source on "compatible" yet unsupported platforms, install NGINX from your respective distribution package manager, or install NGINX Open Source on BSD systems.

Role Variables

This role has multiple variables. The descriptions and defaults for all these variables can be found in the defaults/main/ directory in the following files:

Name	Description
main.yml	NGINX installation variables
agent.yml	NGINX Agent installation variables
amplify.yml	NGINX Amplify agent installation variables
bsd.yml	BSD installation variables
logrotate.yml	Logrotate configuration variables
selinux.yml	SELinux configuration variables
systemd.yml	Systemd configuration variables

Similarly, descriptions and defaults for preset variables can be found in the vars/ directory in the following files:

Name	Description
main.yml	List of supported NGINX platforms, modules, and Linux installation variables

Example Playbooks

Working functional playbook examples can be found in the molecule/ folder in the following files:

Name	Description
agent/converge.yml	Install and configure the NGINX Agent to connect to the NGINX One SaaS control plane on F5 Distributed Cloud
amplify/converge.yml	Install and configure the NGINX Amplify agent
default/converge.yml	Install a specific version of NGINX, install various NGINX supported modules, tweak systemd and set up logrotate
distribution/converge.yml	Install NGINX from the distribution's package repository instead of NGINX's package repository
downgrade/converge.yml	Downgrade to a specific version of NGINX
downgrade-plus/converge.yml	Downgrade to a specific version of NGINX Plus
plus/converge.yml	Install NGINX Plus and various NGINX Plus supported modules
source/converge.yml	Install NGINX from source
stable/converge.yml	Install NGINX using the latest stable release
uninstall/converge.yml	Uninstall NGINX
uninstall-plus/converge.yml	Uninstall NGINX Plus
upgrade/converge.yml	Upgrade NGINX
upgrade-plus/converge.yml	Upgrade NGINX Plus
version/converge.yml	Install a specific version of NGINX and various NGINX modules

Note: If you install this repository via Ansible Galaxy, you will need to replace the include_role variable in the example playbooks from ansible-role-nginx to nginxinc.nginx.

Other NGINX Ansible Collections and Roles

You can find the Ansible NGINX Core collection of roles to install and configure NGINX Open Source, NGINX Plus, and NGINX App Protect here.

You can find the Ansible NGINX configuration role to configure NGINX here.

You can find the Ansible NGINX App Protect role to install and configure NGINX App Protect WAF and NGINX App Protect DoS here.

You can find the Ansible NGINX Unit role to install NGINX Unit here.

License

Apache License, Version 2.0

Author Information

Alessandro Fael Garcia

Grzegorz Dzien

Tom Gamull

© F5, Inc. 2018 - 2024