vm-ansible/roles/webserver/tasks/main.yaml

83 lines
1.7 KiB
YAML
Raw Normal View History

---
2022-04-14 23:52:27 +02:00
- name: "Install Nginx via apt"
apt:
update_cache: yes
state: present
name:
- nginx
2022-04-16 20:01:29 +02:00
- name: Copy default nginx config
ansible.builtin.copy:
src: nginx.conf
dest: /etc/nginx/nginx.conf
owner: root
group: root
mode: '0644'
2022-04-16 14:21:53 +02:00
- name: Enable and restart nginx daemon
service:
name: nginx
state: restarted
enabled: yes
- name: Generate certificate for all server instances
command:
cmd: certbot certonly --non-interactive --agree-tos -m tormakristof@tormakristof.eu --nginx -d {{item.domain}}
with_items: "{{ webserver }}"
- name: "Generate certbot script"
ansible.builtin.template:
src: certbot.sh
dest: /etc/cron.weekly/certbot
owner: root
group: root
mode: '0700'
2022-04-16 18:04:52 +02:00
- name: "Generate nginx configuration"
ansible.builtin.template:
2022-04-14 23:52:27 +02:00
src: nginx.conf
dest: /etc/nginx/nginx.conf
owner: root
2022-04-14 23:52:27 +02:00
group: root
2022-04-16 18:04:52 +02:00
mode: '0644'
2022-04-16 14:21:53 +02:00
- name: Reload nginx daemon
service:
2022-04-14 23:52:27 +02:00
name: nginx
2022-04-16 14:21:53 +02:00
state: reloaded
2022-02-05 20:00:55 +01:00
2022-05-29 15:15:02 +02:00
- name: "Install nginx exporter"
apt:
update_cache: yes
state: present
name:
- prometheus-nginx-exporter
- name: Allow nginx exporter via ufw
community.general.ufw:
rule: allow
port: 9113
proto: tcp
src: 192.168.69.0/24
2022-05-29 17:25:58 +02:00
- name: Copy default nginx config
ansible.builtin.copy:
src: prometheus-nginx-exporter
dest: /etc/default/prometheus-nginx-exporter
owner: root
group: root
mode: '0644'
2022-05-29 15:24:02 +02:00
- name: Enable and restart exporter daemon
service:
name: prometheus-nginx-exporter
state: restarted
enabled: yes
2022-02-05 20:00:55 +01:00
- name: Allow https port via ufw
community.general.ufw:
rule: allow
port: https
2022-05-29 20:38:38 +02:00
src: 192.168.69.0/24
2022-04-16 19:55:29 +02:00
...