ansible-personal/roles/nginx/defaults/main.yml

---
# file: roles/nginx/defaults/main.yml

# path config
nginx_confd_path: /etc/nginx/conf.d

# parent directory of vhost roots
nginx_root_prefix: /var/www

# TLS protocol versions to support
nginx_tls_protocols: TLSv1 TLSv1.1 TLSv1.2

# TLS key directory
tls_key_dir: /etc/ssl/private

# vim: set ts=2 sw=2:
roles/nginx: Add defaults for nginx role Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-27 19:02:29 +02:00			`---`
			`# file: roles/nginx/defaults/main.yml`

			`# path config`
			`nginx_confd_path: /etc/nginx/conf.d`

			`# parent directory of vhost roots`
			`nginx_root_prefix: /var/www`

roles/nginx: Re-work vhost template to support HTTPS Assumes you have a TLS cert for one domain, but not the others, ie: http://blah.com \ http://blah.net -> https://blah.io http://blah.org / Otherwise, without https, it creates a vhost with all domain names. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-09-06 20:32:37 +02:00			`# TLS protocol versions to support`
Downgrade TLS configuration to Mozilla's "intermediate" spec From looking at the list of clients who would be allowed to connect when using the "modern" spec, I think I'd be doing more harm than good to use that config right now... https://www.ssllabs.com/ssltest/analyze.html?d=alaninkenya.org https://wiki.mozilla.org/Security/Server_Side_TLS Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-10-09 20:09:18 +02:00			`nginx_tls_protocols: TLSv1 TLSv1.1 TLSv1.2`
roles/nginx: Re-work vhost template to support HTTPS Assumes you have a TLS cert for one domain, but not the others, ie: http://blah.com \ http://blah.net -> https://blah.io http://blah.org / Otherwise, without https, it creates a vhost with all domain names. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-09-06 20:32:37 +02:00
roles/nginx: Update nginx https stuff - re-organize tls vhost configuration - copy TLS cert from host_vars directly to file Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-09-13 22:16:54 +02:00			`# TLS key directory`
			`tls_key_dir: /etc/ssl/private`

roles/nginx: Add defaults for nginx role Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-27 19:02:29 +02:00			`# vim: set ts=2 sw=2:`