ansible-role/nginx.yml at master · CppComet/ansible-role · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
---
- hosts: all
  vars:
    ws_port: 8087
    ws_ip: 127.0.0.1
  remote_user: root

  tasks:
    - name: Update apt cache
      apt: upgrade=yes update_cache=yes

    - name: Install nginx
      apt:
        name: nginx
        state: present

    - name: Restart nginx
      service:
        service: name=nginx state=restarted enabled=yes

    - name: Autoload in system Nginx
      replace:
        path: /etc/rc.local
        regexp: 'exit 0'
        replace: 'service nginx start \nexit 0'
        backup: no

    - name: Install letsencrypt
      lineinfile:
        dest: /etc/apt/sources.list
        line: 'deb http://ftp.debian.org/debian/ jessie-backports main contrib non-free'

    - name: Update apt cache
      apt: update_cache=yes

    - name: Install letsencrypt
      shell: apt-get install certbot -t jessie-backports -y

    - name: Configuration default setting for site in nginx
      template:
        src: nginx/default-no-ssl.j2
        dest: /etc/nginx/sites-available/default

    - name: Setting for Letsencrypt Create https
      file:
        path: /var/www/letsencrypt
        state: directory
        mode: 0775

    - name: Setting Letsencrypt Create https
      shell: chgrp www-data /var/www/letsencrypt

    - name: Restart nginx
      service:
        service: name=nginx state=restarted enabled=yes

    - name: Restart nginx
      shell: service nginx restart

    - name: ensure file exists
      copy:
        content: ""
        dest: /etc/letsencrypt/cli.ini
        force: no

    - name: Setting for Letsencrypt in cli.ini
      template:
        src: nginx/letsencrypt.j2
        dest: /etc/letsencrypt/cli.ini

    - name: Create https
      shell: certbot --config /etc/letsencrypt/cli.ini  certonly --agree-tos

    - name: Setting HTTPS in nginx
      template:
        src: nginx/nginx.j2
        dest: /etc/nginx/sites-available/default

    - name: Restart nginx
      service:
        service: name=nginx state=restarted enabled=yes