2 files changed, 19 insertions, 0 deletions
diff --git a/roles/nginx-geoip/meta/main.yml b/roles/nginx-geoip/meta/main.yml
new file mode 100644
index 0000000..72b1bd7
--- /dev/null
+++ b/roles/nginx-geoip/meta/main.yml
@@ -0,0 +1,3 @@
+---
+dependencies:
+  - nginx
diff --git a/roles/nginx-geoip/tasks/main.yml b/roles/nginx-geoip/tasks/main.yml
new file mode 100644
index 0000000..3601828
--- /dev/null
+++ b/roles/nginx-geoip/tasks/main.yml
@@ -0,0 +1,16 @@
+---
+# ref https://packages.debian.org/bullseye/amd64/libnginx-mod-http-geoip/filelist
+# installed by default in debian nginx package, including "geoip-database" dep
+# see https://packages.debian.org/bullseye/amd64/geoip-database/filelist
+- name: configure the geoip module
+  copy:
+    # ref https://nginx.org/en/docs/http/ngx_http_geoip_module.html
+    content: geoip_country /usr/share/GeoIP/GeoIP.dat;
+    dest: /etc/nginx/conf.d/geoip.conf
+    owner: root
+    group: root
+    mode: 0444
+  tags:
+    - role::nginx-geoip
+  notify:
+    - reload the nginx service