Ansible-Roles/playbooks/nginx.yml
2026-05-08 22:12:36 +03:00

56 lines
1.5 KiB
YAML

---
- name: Test nginx
hosts: vm-akazantsev
roles:
- nginx
vars:
nginx_selinux: false
pki_dir: /etc/nginx/certs
nginx_webroot: /var/www
local_http_port: 8080
nginx_letsencrypt_managed: true
letsencrypt_acme_install: true
letsencrypt_acme_certs_dir: /etc/letsencrypt/live
nginx_conf_snippets:
- nginx-compression.conf
- nginx-proxy-params.conf
- nginx-server-ssl.conf
# - nginx-websockets.conf
# - nginx-browser-cache.conf
# - letsencrypt-proxy.conf
# - nginx-cors.conf
nginx_streams:
- stream: mysql_proxy
listen_port: 3306
protocol: tcp
backends:
- 10.0.0.10:3306
- 10.0.0.11:3306
- stream: dns_proxy
listen_port: 53
protocol: udp
timeout: 1s
connect_timeout: 1s
backends:
- 8.8.8.8:53
nginx_virthosts:
- virthost_name: gigacoms.ru
listen: "80"
server_name: gigacoms.ru
server_aliases: "www.gigacoms.ru"
index: index.html
# error_page: /path_to_error_page.html
ssl_enabled: true
ssl_only: true
ssl_letsencrypt_certs: "{{ nginx_letsencrypt_managed }}"
root: "{{ nginx_webroot }}"
server_tokens: "off"
proxy_standard_setup: true
proxy_additional_options:
- proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache:30m max_size=250m;
locations:
- location: /
target: http://localhost:{{ local_http_port }}