15 Commits

Author	SHA1	Message	Date
Alan Orth	6de385021d	roles/nginx: Updates to accomodate Debian 9 (stretch) ... There are currently no nginx.org builds for Debian 9, so we need to use the package from Debian's repository. This package provides a www-data user and group instead of an nginx one. We can revert some of this after Debian 9 is released and official builds come from nginx.org (though it might be useful to keep the main nginx.conf as a template).	2017-01-30 15:43:03 +02:00
Alan Orth	d1871d9706	roles/nginx: Check for variable existence before testing ... Some vhosts might not have WordPress so we need to be better about testing for this before checking its value.	2016-09-12 20:58:21 +03:00
Alan Orth	aa8735e0ea	roles/nginx: Use explicity booleans for tests instead of "yes" and "no" ... Better to be explict with booleans rather than being confused when you mix up yes and "yes" with Ansible/Python testing of conditionals.	2016-08-17 12:55:14 +03:00
Alan Orth	de704a917f	roles/nginx: use boolean for use_letsencrypt instead of string "yes" ... This is very confusing when you forget about how Ansible/Python is testing conditionals. Let's use actual booleans so it's more clear.	2016-08-17 12:42:48 +03:00
Alan Orth	2a78c5cf59	roles/nginx: Add sanity check for use_letsencrypt variable ... Not all hosts will have this, so this task will flat out fail. We better check to see if it exists before we try to use it. ;)	2016-08-17 12:27:24 +03:00
Alan Orth	f798e47ad8	roles/nginx: Add 'force=yes' to WordPress git repo clone ... I never modify file in the git repo, but the WordPress updater does updates from the web (for example TwentySixteen theme), and this always causes the task to fail when I switch WordPress versions.	2016-08-17 11:39:10 +03:00
Alan Orth	0cd2735c82	roles/nginx: Rework Let's Encrypt stuff ... Take an opinionated stance on HTTPS and assume that hosts are using HTTPS for all vhosts. This can either be via custom TLS cert/key pairs defined in the host's variables (could even be self-signed certificates on dev boxes) or via Let's Encrypt.	2016-06-27 23:52:39 +03:00
Alan Orth	6a3b8f0918	Update some bare variables in with_items loops to use Ansible 2.0 syntax ... See: https://docs.ansible.com/ansible/porting_guide_2.0.html Signed-off-by: Alan Orth <alan.orth@gmail.com>	2016-03-11 18:53:07 +02:00
Alan Orth	940b2720da	Rename nginx_* variables underneath nginx_vhosts ... It's just deduplication, since it's already obvious that the dict is for nginx-related vars: - nginx_domain_name→domain_name - nginx_domain_aliases→domain_aliases - nginx_enable_https→enable_https - nginx_enable_hsts→enable_hsts Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-12-10 00:25:44 +02:00
Alan Orth	41547defb9	Finish moving logic and variables from nginx_tls_vhosts to nginx_vhosts ... Everything is TLS now (whether self-signed or not), so it's pointless to distinguish. Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-12-10 00:14:47 +02:00
Alan Orth	7b9536838c	roles/nginx: Move nginx tls_vhosts.yml to vhosts.yml ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-12-09 23:56:50 +02:00
Alan Orth	dc5c09036c	Change pattern from nginx_tls_vhosts→nginx_vhosts ... All hosts should have TLS now, whether self-signed "snakeoil" certs or otherwise. Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-12-09 23:54:18 +02:00
Alan Orth	4b74964963	roles/nginx: Do a shallow clone of WordPress git ... I realized there was no need to do a full clone when I was working in a Vagrant environment in a coffee shop with slow Internet. ;) Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-06-01 14:32:05 +03:00
Alan Orth	1174db87bc	roles/nginx: Add task to clone WordPress git ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-02-26 17:39:17 +03:00
Alan Orth	e6ffdf8652	roles/nginx: Update nginx https stuff ... - re-organize tls vhost configuration - copy TLS cert from host_vars directly to file Signed-off-by: Alan Orth <alan.orth@gmail.com>	2014-09-13 23:16:54 +03:00