diff options
Diffstat (limited to 'roles/nginx')
| -rw-r--r-- | roles/nginx/files/default_server.conf | 8 | ||||
| -rw-r--r-- | roles/nginx/files/files.pydis.wtf | 10 | ||||
| -rw-r--r-- | roles/nginx/tasks/main.yml | 25 |
3 files changed, 42 insertions, 1 deletions
diff --git a/roles/nginx/files/default_server.conf b/roles/nginx/files/default_server.conf index 13e74a0..1d68ff5 100644 --- a/roles/nginx/files/default_server.conf +++ b/roles/nginx/files/default_server.conf @@ -1,5 +1,13 @@ # Managed by Ansible server { + listen 80 default_server; + + server_name _; + + return 301 https://$host$request_uri; +} + +server { listen 443 ssl http2 default_server; ssl_certificate /etc/letsencrypt/live/pydis.wtf/fullchain.pem; diff --git a/roles/nginx/files/files.pydis.wtf b/roles/nginx/files/files.pydis.wtf new file mode 100644 index 0000000..db8416e --- /dev/null +++ b/roles/nginx/files/files.pydis.wtf @@ -0,0 +1,10 @@ +# Managed by Ansible +server { + listen 443; + server_name files.pydis.wtf; + root /var/www/turing; + + location / { + try_files $uri $uri/; + } +} diff --git a/roles/nginx/tasks/main.yml b/roles/nginx/tasks/main.yml index 266e916..85fe7ec 100644 --- a/roles/nginx/tasks/main.yml +++ b/roles/nginx/tasks/main.yml @@ -19,4 +19,27 @@ tags: - role::nginx notify: - - reload the nginx service + - Reload the nginx service + +- name: Remove default nginx site + file: + path: /etc/nginx/sites-enabled/default + state: absent + +- name: Copy file server config + copy: + src: files.pydis.wtf + dest: /etc/nginx/sites-available/files.pydis.wtf + group: root + owner: root + mode: "0644" + tags: + - role::nginx + notify: + - Reload the nginx service + +- name: Enable file server + file: + src: /etc/nginx/sites-available/files.pydis.wtf + dest: /etc/nginx/sites-enabled/files.pydis.wtf + state: link |