aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAaron LI <aly@aaronly.me>2019-09-22 10:16:20 +0800
committerAaron LI <aly@aaronly.me>2019-09-22 10:16:20 +0800
commit60c85c56f25e10b9819214507ebd496cc0fbb855 (patch)
tree39ed0f85eb7680c8842f95d6c0f300997c2cdfb4
parent7301c08c19b7b024c1d33f556d1db984eff24e2e (diff)
downloadansible-dfly-vps-60c85c56f25e10b9819214507ebd496cc0fbb855.tar.bz2
web: Add 'nginx' tag
-rw-r--r--roles/web/tasks/main.yml12
1 files changed, 11 insertions, 1 deletions
diff --git a/roles/web/tasks/main.yml b/roles/web/tasks/main.yml
index 7c7b88f..3841cb8 100644
--- a/roles/web/tasks/main.yml
+++ b/roles/web/tasks/main.yml
@@ -12,6 +12,7 @@
path: "{{ playbook_dir }}/private/ssl/dhparam4096.pem"
delegate_to: localhost
register: stat_result
+ tags: nginx
- name: (local) ssl/tls - generate dhparam (4096 bit)
become: false
@@ -20,27 +21,32 @@
-out "{{ playbook_dir }}/private/ssl/dhparam4096.pem" 4096
delegate_to: localhost
when: not stat_result.stat.exists
+ tags: nginx
- name: ssl/tls - copy dhparam
copy:
src: "{{ playbook_dir }}/private/ssl/dhparam4096.pem"
dest: /usr/local/etc/ssl/dhparam4096.pem
mode: 0444
+ tags: nginx
- name: nginx - copy conf.d/ config directory
copy:
src: nginx/conf.d/ # trailing '/' -> directory contents
dest: /usr/local/etc/nginx/conf.d/
+ tags: nginx
- name: nginx - create sites/ directory
file:
path: /usr/local/etc/nginx/sites
state: directory
+ tags: nginx
- name: nginx - generate basic site for ACME
template:
src: sites/00-acme-httpredirect.conf.j2
dest: /usr/local/etc/nginx/sites/00-acme-httpredirect.conf
+ tags: nginx
- name: nginx - copy nginx.conf
copy:
@@ -50,20 +56,24 @@
# include other config files!
#validate: "nginx -t -c %s"
notify: reload-nginx
+ tags: nginx
- name: nginx - check configuration
command: nginx -t
+ tags: nginx
- name: nginx - enable and start
command: rcenable nginx
+ tags: nginx
-- name: newsyslog - nginx log rotation
+- name: nginx - set newsyslog to rotate log file
blockinfile:
path: /etc/newsyslog.conf
marker: '# {mark} ANSIBLE MANAGED - nginx'
block: |
/var/log/nginx/access.log 644 7 * @T00 Z /var/run/nginx.pid
/var/log/nginx/error.log 644 7 * @T00 Z /var/run/nginx.pid
+ tags: nginx
- name: acme - copy scripts
copy: