infrastructure/playbooks/tasks/chat/nginx.yml

43 lines
1.2 KiB
YAML

---
- name: Create auto redirect to TLS for movim
ansible.builtin.blockinfile:
path: "{{ nginx.paths.sites_available }}/redirect_to_https"
block: |
server {
listen 80 default_server;
server_name _;
return 301 https://$host$request_uri;
}
create: true
- name: Create movim website
ansible.builtin.template:
dest: "{{ nginx.paths.sites_available }}/{{ movim.domain }}"
src: tasks/chat/templates/movim.j2
owner: "{{ root.user }}"
group: "{{ root.group }}"
mode: "644"
- name: Enable movim website
ansible.builtin.file:
state: link
dest: "{{ nginx.paths.sites_enabled }}/{{ movim.domain }}"
src: "{{ nginx.paths.sites_available }}/{{ movim.domain }}"
- name: Enable auto redirect to TLS
ansible.builtin.file:
state: link
dest: "{{ nginx.paths.sites_enabled }}/redirect_to_https"
src: "{{ nginx.paths.sites_available }}/redirect_to_https"
- name: Set access logs to off
ansible.builtin.blockinfile:
path: "{{ nginx.paths.conf_d }}/10-access_log-disabled.conf"
block: |
access_log off;
create: true
- name: Reload nginx service
ansible.builtin.systemd_service:
name: nginx
state: restarted