Alan Orth
6c3cf40a16
Instead of manually creating our own self-signed certificate we can use the one created automatically by the ssl-cert package on Debian. This is only used by the dummy default HTTPS vhost.
24 lines
764 B
YAML
24 lines
764 B
YAML
---
|
|
|
|
- block:
|
|
- name: Configure https vhosts
|
|
template: src=vhost.conf.j2 dest={{ nginx_confd_path }}/{{ item.domain_name }}.conf mode=0644 owner=root group=root
|
|
loop: "{{ nginx_vhosts }}"
|
|
notify:
|
|
- reload nginx
|
|
|
|
- name: Download 4096-bit RFC 7919 dhparams
|
|
get_url:
|
|
url: https://raw.githubusercontent.com/internetstandards/dhe_groups/master/ffdhe4096.pem
|
|
checksum: sha256:64852d6890ff9e62eecd1ee89c72af9af244dfef5b853bcedea3dfd7aade22b3
|
|
dest: "{{ nginx_ssl_dhparam }}"
|
|
notify:
|
|
- reload nginx
|
|
|
|
- name: Create vhost document roots
|
|
file: path={{ nginx_root_prefix }}/{{ item.domain_name }} state=directory mode=0755 owner=nginx group=nginx
|
|
loop: "{{ nginx_vhosts }}"
|
|
tags: nginx
|
|
|
|
# vim: set ts=2 sw=2:
|