14 Commits

Author	SHA1	Message	Date
Alan Orth	78cb49c88b	roles/nginx: Add missing nginx tag to blank vhost task ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-06-06 00:07:50 +03:00
Alan Orth	151fb29687	roles/nginx: Add blank vhost ... For security and predictability clients should only get a reponse if they request a hostname we are actually hosting. If TLS is in use then this will use a self-signed snakeoil cert for an HTTPS-enabled blank, default vhost. Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-06-06 00:07:50 +03:00
Alan Orth	3746e798b6	roles/nginx: Use template for nginx repo ... A template is better than ansible's `apt_repository` module because we can idempotently control the contents of the file based on vari- ables. Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-05-25 00:15:49 +03:00
Alan Orth	e675b750c4	roles/nginx: Switch to nginx stable branch ... Remove old mainline repo and add stable repo to get nginx 1.8.0. See: http://nginx.org/en/CHANGES-1.8 Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-04-23 14:52:22 +03:00
Alan Orth	4602f03bed	roles/nginx: Fix comment in main task ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-03-25 12:59:10 +03:00
Alan Orth	b93da27fde	roles/nginx: Create fastcgi cache dir ... Or else nginx doesn't start. Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-02-19 18:49:39 +03:00
Alan Orth	0b90bad6a9	roles/nginx: Add fastcgi caching ... Bypasses caching for logged in users (right now only for sessions where the "wordpress_logged_in" cookie is set. Doubles the trans- actions per second as measured by siege: $ siege -d1 -t1M -c50 https://mjanja.ch Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-02-10 23:04:28 +03:00
Alan Orth	4ea152bf51	roles/nginx: Add HTTP headers for web application security ... See: https://github.com/h5bp/server-configs-nginx/blob/master/h5bp/directive-only/extra-security.conf See: https://www.owasp.org/index.php/List_of_useful_HTTP_headers Signed-off-by: Alan Orth <alan.orth@gmail.com>	2015-01-24 13:05:42 +03:00
Alan Orth	d04293a664	roles/nginx: Set nginx state to 'latest' in apt ... This way we can upgrade nginx simply by running the nginx tags. Signed-off-by: Alan Orth <alan.orth@gmail.com>	2014-12-02 18:48:11 +03:00
Alan Orth	956fbefc1a	roles/nginx: Switch to nginx mainline (1.7) ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2014-11-07 01:02:44 +03:00
Alan Orth	e6ffdf8652	roles/nginx: Update nginx https stuff ... - re-organize tls vhost configuration - copy TLS cert from host_vars directly to file Signed-off-by: Alan Orth <alan.orth@gmail.com>	2014-09-13 23:16:54 +03:00
Alan Orth	5bbec6716c	roles/nginx: Use template to configure nginx vhosts ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2014-08-27 20:03:34 +03:00
Alan Orth	ff95a34605	roles/nginx: Add vim modeline to main.yml ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2014-08-27 20:00:42 +03:00
Alan Orth	60b8ecdd4c	Initial commit ... Signed-off-by: Alan Orth <alan.orth@gmail.com>	2014-08-17 00:35:57 +03:00