ansible-personal/roles/nginx/defaults/main.yml

---
# file: roles/nginx/defaults/main.yml

# path config
nginx_confd_path: /etc/nginx/conf.d

# parent directory of vhost roots
nginx_root_prefix: /var/www

# 1 hour timeout
nginx_ssl_session_timeout: 1h
# 10MB -> 40,000 sessions
nginx_ssl_session_cache: shared:SSL:10m
# 1400 bytes to fit in one MTU (default is 16k!)
nginx_ssl_buffer_size: 1400
nginx_ssl_dhparam: /etc/ssl/certs/dhparam.pem
nginx_ssl_protocols: 'TLSv1 TLSv1.1 TLSv1.2'

# TLS key directory
tls_key_dir: /etc/letsencrypt/live

# stable is 1.10.x
# mainline is 1.9.x
nginx_version: mainline

# vim: set ts=2 sw=2:
roles/nginx: Add defaults for nginx role Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-27 19:02:29 +02:00			`---`
			`# file: roles/nginx/defaults/main.yml`

			`# path config`
			`nginx_confd_path: /etc/nginx/conf.d`

			`# parent directory of vhost roots`
			`nginx_root_prefix: /var/www`

roles/nginx: Templatize SSL parameters using role defaults Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-06-04 22:28:31 +02:00			`# 1 hour timeout`
			`nginx_ssl_session_timeout: 1h`
			`# 10MB -> 40,000 sessions`
			`nginx_ssl_session_cache: shared:SSL:10m`
			`# 1400 bytes to fit in one MTU (default is 16k!)`
			`nginx_ssl_buffer_size: 1400`
			`nginx_ssl_dhparam: /etc/ssl/certs/dhparam.pem`
			`nginx_ssl_protocols: 'TLSv1 TLSv1.1 TLSv1.2'`

roles/nginx: Update nginx https stuff - re-organize tls vhost configuration - copy TLS cert from host_vars directly to file Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-09-13 22:16:54 +02:00			`# TLS key directory`
Switch HTTPS vhosts to Let's Encrypt certificates For now I generated the certs manually, but in the future the play- book should run the letsencrypt-auto client for us! Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-11-07 18:52:48 +01:00			`tls_key_dir: /etc/letsencrypt/live`
roles/nginx: Update nginx https stuff - re-organize tls vhost configuration - copy TLS cert from host_vars directly to file Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-09-13 22:16:54 +02:00
roles/nginx: Switch default version to 1.10.x (stable) 2016-04-27 14:05:19 +02:00			`# stable is 1.10.x`
roles/nginx: Use template for nginx repo A template is better than ansible's `apt_repository` module because we can idempotently control the contents of the file based on vari- ables. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-05-24 23:15:49 +02:00			`# mainline is 1.9.x`
roles/nginx: Use mainline branch by default Has all the good stuff: http://nginx.org/en/CHANGES 2016-05-27 07:14:04 +02:00			`nginx_version: mainline`
roles/nginx: Use template for nginx repo A template is better than ansible's `apt_repository` module because we can idempotently control the contents of the file based on vari- ables. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-05-24 23:15:49 +02:00
roles/nginx: Add defaults for nginx role Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-27 19:02:29 +02:00			`# vim: set ts=2 sw=2:`