Add nginx deployment

Includes documented roles for:
- installing nginx & configuring handlers
- installing the mTLS certificate for Cloudflare
- installing firewall rules

They are kept separate for now, for composability.

Closes #22.

3 files changed, 21 insertions, 0 deletions

diff --git a/roles/nginx/README.md b/roles/nginx/README.md
new file mode 100644
index 0000000..245cc99
--- /dev/null
+++ b/roles/nginx/README.md
@@ -0,0 +1,7 @@
+# Role "nginx"
+
+Installs nginx on target hosts and provides a handler for reloading nginx, for
+instance on configuration change or certificate renewal.
+
+
+<!-- vim: set textwidth=80 sw=2 ts=2: -->
diff --git a/roles/nginx/handlers/main.yml b/roles/nginx/handlers/main.yml
new file mode 100644
index 0000000..376d85a
--- /dev/null
+++ b/roles/nginx/handlers/main.yml
@@ -0,0 +1,7 @@
+---
+- name: reload the nginx service
+  service:
+    name: nginx
+    state: reloaded
+  tags:
+    - role::nginx
diff --git a/roles/nginx/tasks/main.yml b/roles/nginx/tasks/main.yml
new file mode 100644
index 0000000..849a09e
--- /dev/null
+++ b/roles/nginx/tasks/main.yml
@@ -0,0 +1,7 @@
+---
+- name: install nginx
+  package:
+    name: nginx
+    state: present
+  tags:
+    - role::nginx