stargate-cluster/vm-ansible
stargate-cluster/vm-ansible
1
0
Fork 0
Code Pull Requests Releases Activity

add redirect to nginx

Browse Source
This commit is contained in:
Torma Kristóf 2022-04-17 14:24:18 +02:00
parent 8b295da3a3
commit df477801d4
4 changed files with 25 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
roles/webgateway/tasks/main.yaml
View File

@ -42,6 +42,11 @@
cmd: certbot certonly --non-interactive --agree-tos -m tormakristof@tormakristof.eu --nginx -d {{item.domain}}
with_items: "{{ static }}"
- name: Generate certificate for all static sites
command:
cmd: certbot certonly --non-interactive --agree-tos -m tormakristof@tormakristof.eu --nginx -d {{item.domain}}
with_items: "{{ redirect }}"
- name: "Generate certbot script"
ansible.builtin.template:
src: certbot.sh

3
roles/webgateway/templates/certbot.sh
View File

@ -6,3 +6,6 @@ certbot renew --nginx --cert-name {{ proxysite.domain }}
{% for staticsite in static %}
certbot renew --nginx --cert-name {{ staticsite.domain }}
{% endfor %}
{% for redirectsite in redirect %}
certbot renew --nginx --cert-name {{ redirectsite.domain }}
{% endfor %}

12
roles/webgateway/templates/nginx.conf
View File

@ -92,4 +92,16 @@ http {
}
{% endfor %}
{% for redirectsite in redirect %}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name {{ redirectsite.domain }};
ssl_certificate /etc/letsencrypt/live/{{ redirectsite.domain }}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/{{ redirectsite.domain }}/privkey.pem;
return 301 {{ redisrectsite.destination }};
}
{% endfor %}
}

8
roles/webgateway/vars/main.yaml
View File

@ -10,8 +10,10 @@ proxy:
- {domain: swagger.kmlabz.com, ip: swagger.stargate.internal}
static:
- {domain: tormakristof.eu, directory: /var/www/tormakristof.eu, repo: "https://git.kmlabz.com/kmlabz/homepage.git"}
- {domain: tormakris.dev, directory: /var/www/tormakristof.eu, repo: "https://git.kmlabz.com/kmlabz/homepage.git"}
- {domain: torma.xyz, directory: /var/www/tormakristof.eu, repo: "https://git.kmlabz.com/kmlabz/homepage.git"}
- {domain: kmlabz.com, directory: /var/www/kmlabz.com, repo: "https://git.kmlabz.com/kmlabz/homepage.git"}
redirect:
- {domain: tormakristof.eu, destination: "https://www.tormakristof.eu"}
- {domain: tormakris.dev, destination: "https://www.tormakristof.eu"}
- {domain: torma.xyz, destination: "https://www.tormakristof.eu"}
...