55 lines
1.3 KiB
YAML
55 lines
1.3 KiB
YAML
---
|
|
|
|
# TODO: make idempotent
|
|
- name: Remove default nginx config
|
|
file:
|
|
name: /etc/nginx/sites-enabled
|
|
state: absent
|
|
|
|
# TODO: make idempotent
|
|
- name: Restore sites-enabled
|
|
file:
|
|
name: /etc/nginx/sites-enabled
|
|
state: directory
|
|
|
|
- name: Install system nginx config
|
|
copy:
|
|
src: nginx.conf
|
|
dest: /etc/nginx/nginx.conf
|
|
|
|
# setup our configs for each host (we don't want to
|
|
# overwrite certbot's changes, so if it already exists,
|
|
# don't copy!)
|
|
|
|
- name: Install nginx config for {{ domain }}
|
|
template:
|
|
src: templates/site.conf
|
|
dest: /etc/nginx/conf.d/{{ domain }}.conf
|
|
force: no
|
|
|
|
- name: Install nginx config for git.{{ domain }}
|
|
template:
|
|
src: templates/gitea.conf
|
|
dest: /etc/nginx/conf.d/git.{{ domain }}.conf
|
|
force: no
|
|
|
|
- name: Install nginx config for our Hidden Service
|
|
template:
|
|
src: templates/tor.conf
|
|
dest: /etc/nginx/conf.d/tor-{{ domain }}.conf
|
|
force: no
|
|
|
|
- name: Reload Nginx to install LetsEncrypt
|
|
service:
|
|
name: nginx
|
|
state: restarted
|
|
|
|
# certbot is a life saver. thank you certbot devs!
|
|
- name: Setup certbot
|
|
shell: "certbot --nginx --non-interactive --agree-tos -m {{ contact_email }} -d {{ domain }} -d git.{{ domain }}"
|
|
|
|
- name: Reload Nginx with LetsEncrypt installed
|
|
systemd:
|
|
name: nginx
|
|
enabled: yes
|
|
state: restarted |