roles/server/nginx/server/tasks/main.yml

   1 #####################################
   2 ### someone's ansible provisioner ###
   3 #####################################
   4 # Part of: https://git.somenet.org/root/pub/somesible.git
   5 # 2017-2026 by someone <someone@somenet.org>
   6 #
   7
   8 - name: install web-server
   9   apt:
  10     pkg:
  11     - nginx-full
  12     - libwww-perl
  13     state: present
  14     policy_rc_d: 101
  15   tags: "online"
  16   ignore_errors: "{{ignore_online_errors | bool}}"
  17
  18
  19 - name: copy nginx.conf
  20   copy:
  21     src: "{{item}}"
  22     dest: "/etc/nginx/nginx.conf"
  23     mode: 0644
  24     owner: "root"
  25     group: "root"
  26   with_first_found:
  27     - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/nginx.conf"
  28     - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/nginx.conf"
  29     - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/nginx.conf"
  30     - "default/nginx.conf"
  31   notify: restart nginx.service
  32
  33
  34 - name: copy default vhost
  35   copy:
  36     src: "{{item}}"
  37     dest: "/etc/nginx/sites-enabled/000-default.vhost"
  38     mode: 0644
  39     owner: "root"
  40     group: "root"
  41   with_first_found:
  42     - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/000-default.vhost"
  43     - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/000-default.vhost"
  44     - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/000-default.vhost"
  45     - "default/000-default.vhost"
  46   register: temp_result
  47
  48
  49 - name: enable and restart nginx.service when default vhost changes
  50   systemd:
  51     name: nginx.service
  52     daemon_reload: yes
  53     enabled: yes
  54     state: restarted
  55   when: temp_result.changed
  56
  57
  58 - name: copy default robots.txt
  59   copy:
  60     src: "{{item}}"
  61     dest: "/var/www/html/robots.txt"
  62     mode: 0644
  63     owner: "root"
  64     group: "root"
  65   with_first_found:
  66     - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/robots.txt"
  67     - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/robots.txt"
  68     - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/robots.txt"
  69     - "default/robots.txt"
  70   notify: restart nginx.service
  71
  72
  73 - name: copy default maintenance.html
  74   copy:
  75     src: "{{item}}"
  76     dest: "/var/www/maintenance.html.dis"
  77     mode: 0644
  78     owner: "root"
  79     group: "root"
  80   with_first_found:
  81     - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/maintenance.html"
  82     - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/maintenance.html"
  83     - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/maintenance.html"
  84     - "default/maintenance.html"
  85   notify: restart nginx.service
  86
  87
  88 - name: fix permissions of /var/www/
  89   file:
  90     path: "/var/www/"
  91     state: directory
  92     mode: 0755
  93     owner: "root"
  94     group: "root"
  95
  96
  97 - name: fix permissions of /var/www/html/
  98   file:
  99     path: "/var/www/html"
 100     state: directory
 101     mode: 0755
 102     owner: "root"
 103     group: "root"
 104
 105
 106 - name: copy nginx.service to /etc/systemd/system/
 107   copy:
 108     src: "{{item}}"
 109     dest: "/etc/systemd/system/nginx.service"
 110     mode: 0644
 111     owner: "root"
 112     group: "root"
 113   with_first_found:
 114     - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/nginx.service"
 115     - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/nginx.service"
 116     - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/nginx.service"
 117     - "default/nginx.service"
 118
 119
 120 - name: enable and start nginx.service
 121   include_role: name="base/systemd/enable-and-start"
 122   vars:
 123     service_name: nginx.service
 124
 125
 126 ###########
 127 # AWSTATS #
 128 ###########
 129 - name: install awstats
 130   apt:
 131     pkg:
 132     - fcgiwrap
 133     - awstats
 134     - geoip-database
 135     - libgeo-ip-perl
 136     - libnet-dns-perl
 137     - libnet-ip-perl
 138     state: present
 139     policy_rc_d: 101
 140   tags: "online"
 141   ignore_errors: "{{ignore_online_errors | bool}}"
 142
 143
 144 - name: remove broken awstats directory
 145   file:
 146     path: "/etc/logrotate.d/httpd-prerotate/awstats"
 147     state: absent
 148
 149
 150 - name: disable periodic update by cron
 151   copy:
 152     content: "# disabled by someone's ansible provisioner"
 153     dest: "/etc/cron.d/awstats"
 154     mode: 0640
 155     owner: "root"
 156     group: "root"
 157
 158
 159 - name: copy awstats "default" vhost config
 160   copy:
 161     src: "{{item}}"
 162     dest: "/etc/awstats/awstats.conf.local"
 163     mode: 0644
 164     owner: "root"
 165     group: "root"
 166   with_first_found:
 167     - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/awstats.conf.local"
 168     - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/awstats.conf.local"
 169     - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/awstats.conf.local"
 170     - "default/awstats.conf.local"
 171
 172
 173 - name: copy awstats logrotate script
 174   copy:
 175     src: "{{item}}"
 176     dest: "/etc/logrotate.d/httpd-prerotate/awstats-logrotate-script"
 177     mode: 0750
 178     owner: "root"
 179     group: "root"
 180   with_first_found:
 181     - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/awstats-logrotate-script"
 182     - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/awstats-logrotate-script"
 183     - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/awstats-logrotate-script"
 184     - "default/awstats-logrotate-script"
 185
 186
 187 - name: nginx logrotate zzz config
 188   copy:
 189     src: "{{item}}"
 190     dest: "/etc/logrotate.d/zzz_nginx"
 191     mode: 0644
 192     owner: "root"
 193     group: "root"
 194   with_first_found:
 195     - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/nginx.logrotate"
 196     - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/nginx.logrotate"
 197     - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/nginx.logrotate"
 198     - "default/nginx.logrotate"
 199
 200
 201 - name: nginx logrotate empty config
 202   copy:
 203     src: "{{item}}"
 204     dest: "/etc/logrotate.d/nginx"
 205     mode: 0644
 206     owner: "root"
 207     group: "root"
 208   with_first_found:
 209     - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/nginx.empty.logrotate"
 210     - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/nginx.empty.logrotate"
 211     - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/nginx.empty.logrotate"
 212     - "default/nginx.empty.logrotate"
 213
 214
 215 - name: nginx-awstats pam.d config
 216   copy:
 217     src: "{{item}}"
 218     dest: "/etc/pam.d/nginx-awstats"
 219     mode: 0644
 220     owner: "root"
 221     group: "root"
 222   with_first_found:
 223     - "{{lookup('env','PWD')}}/host_files/{{inventory_hostname}}/{{role_name}}/nginx-awstats.pam"
 224     - "{{lookup('env','PWD')}}/group_files/{{group_files_group}}/{{role_name}}/nginx-awstats.pam"
 225     - "{{lookup('env','PWD')}}/group_files/all/{{role_name}}/nginx-awstats.pam"
 226     - "default/nginx-awstats.pam"
 227
 228
 229 - name: enable and start fcgiwrap.socket
 230   include_role: name="base/systemd/enable-and-start"
 231   vars:
 232     service_name: fcgiwrap.socket