roles/nginx-geoip/tasks/main.yml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

---
# ref https://packages.debian.org/bullseye/amd64/libnginx-mod-http-geoip/filelist
# installed by default in debian nginx package, including "geoip-database" dep
# see https://packages.debian.org/bullseye/amd64/geoip-database/filelist
- name: Configure the geoip module
  copy:
    # ref https://nginx.org/en/docs/http/ngx_http_geoip_module.html
    content: geoip_country /usr/share/GeoIP/GeoIP.dat;
    dest: /etc/nginx/conf.d/geoip.conf
    owner: root
    group: root
    mode: 0444
  tags:
    - role::nginx-geoip
  notify:
    - reload the nginx service