Ansible playbook for base and initial configuration of web server hosting my personal websites.

ansible

Go to file

Alan Orth 6ccfdb99fa roles/nginx: Enable OCSP stapling Reduces round trip time for clients. Note: I am using a certificate chain in the `ssl_certificate' directive, so as I understand it, I don't need to use an explicit trusted intermediate + root CA cert with the `ssl_trusted_certificate' option. See the nginx docs for more[0]. Addresses GitHub Issue #5. Seems to be working, test with: $ openssl s_client -connect mjanja.ch:443 -servername mjanja.ch -tls1 -tlsextdebug -status Look for "OCSP Response" with "Cert Status: good". [0] http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling Signed-off-by: Alan Orth <alan.orth@gmail.com>		2014-12-06 23:28:05 +03:00
group_vars	Update tls cipher suite with latest string from Mozilla TLS guide	2014-10-25 12:36:19 +03:00
host_vars	host_vars/web05: Add mosh ports to iptables	2014-11-21 00:29:08 +01:00
roles	roles/nginx: Enable OCSP stapling	2014-12-06 23:28:05 +03:00
vars	Revert "roles/nginx: Ingenius use of YAML hashes to derive TLS key from another file"	2014-10-27 21:16:43 +03:00
.gitignore	Add top-level .gitignore	2014-08-25 15:15:55 +03:00
README.md	roles/nginx: Adjust Cache-Control headers	2014-11-07 00:29:53 +03:00
site.yml	Add site yml file	2014-08-25 13:21:00 +03:00
web.yml	web.yml: Modify to incorporate provisioning user stuff	2014-10-11 12:12:32 +03:00

README.md

Ansible Playbook

Ansible playbook for base and initial configuration of web server hosting my personal websites. After successful execution of this playbook, however, there is still some manual work to import databases, copy site content, etc.

Assumptions

Before you can run this, a few things are assumed:

You have a clean, minimal Ubuntu 14.04 host up and running
You have a user account with password-less SSH access to the machine
You have sudo privileges on the remote host
You have created a hosts file with something like:

[web]
web01

Use

Once you've satisfied the the above assumptions, you can execute:

ansible-playbook web.yml -i hosts -K

Testing in a VM (KVM)

A simple way to test locally in a virtual machine using libvirt + KVM:

sudo virt-install -n web01 -r 1024 --vcpus 2 -l http://ubuntu.mirror.ac.ke/ubuntu/dists/trusty/main/installer-amd64/ --os-type=linux --os-variant=ubuntusaucy --disk /home/aorth/software/vms/web01.qcow2,device=disk,bus=virtio,format=qcow2,size=40 --vnc --cpuset=1,2 -x "auto=true priority=critical url=http://blah.com/~aorth/preseed/public/ubuntu-14.04.cfg"

This boots from a network Ubuntu mirror, then uses a preseed to automate the OS installation.

Testing in Vagrant

Not as simple as on GNU/Linux with KVM, but still easy:

vagrant init ubuntu/trusty64

Then uncomment the following line in your Vagrantfile:

# Create a public network, which generally matched to bridged network.
# Bridged networks make the machine appear as another physical device on
# your network.
config.vm.network "public_network"

And finally, bring the machine up:

vagrant up