78 lines
1.5 KiB
YAML
78 lines
1.5 KiB
YAML
- name: Install
|
|
package:
|
|
name:
|
|
- nginx
|
|
- dehydrated
|
|
|
|
- name: create folders
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
with_items:
|
|
- /srv/http/.well-known/acme-challenge
|
|
- /etc/nginx/sites.d
|
|
- /etc/nginx/local.d
|
|
- /etc/nginx/snippets
|
|
|
|
- name: templates
|
|
notify: reload nginx
|
|
template:
|
|
src: "{{ item.file }}"
|
|
dest: "/etc/nginx/{{ item.path }}"
|
|
with_items:
|
|
- file: nginx.conf
|
|
path: nginx.conf
|
|
- file: letsencrypt.nginx
|
|
path: snippets/letsencrypt.conf
|
|
- file: 00-tls-redirect.nginx
|
|
path: sites.d/00-tls-redirect.act
|
|
|
|
- name: started
|
|
systemd:
|
|
name: nginx
|
|
state: started
|
|
|
|
- name: config dehydrated
|
|
template:
|
|
src: dehydrated
|
|
dest: /etc/dehydrated/config
|
|
|
|
- name: get let's encrypt account
|
|
command: /usr/bin/dehydrated --register --accept-terms
|
|
args:
|
|
creates: /etc/dehydrated/accounts
|
|
|
|
- name: get inventory_hostname cert
|
|
notify: dehydrated
|
|
lineinfile:
|
|
path: /etc/dehydrated/domains.txt
|
|
line: "{{ inventory_hostname }}"
|
|
create: yes
|
|
|
|
- name: templates tls
|
|
notify: reload nginx
|
|
template:
|
|
src: "10-tls.nginx"
|
|
dest: "/etc/nginx/sites.d/10-tls.act"
|
|
|
|
- name: templates local.d
|
|
notify: reload nginx
|
|
template:
|
|
src: "10-tls.local.nginx"
|
|
dest: "/etc/nginx/local.d/10-tls.act"
|
|
|
|
- name: enabled dehydrated
|
|
systemd:
|
|
name: dehydrated.timer
|
|
state: started
|
|
enabled: yes
|
|
|
|
- name: php
|
|
import_tasks: php.yml
|
|
when: webserver_php_enabled
|
|
|
|
- name: enabled nginx
|
|
systemd:
|
|
name: nginx
|
|
enabled: yes
|