Рабочие роли вынесены на уровень вверх

ansible/roles/blocks/owner/defaults/main.yml

@@ -1,5 +0,0 @@
----
-owner_name: ''
-owner_group: '{{ owner_name }}'
-owner_ssh_keys: []
-owner_envs: {}

ansible/roles/blocks/owner/tasks/main.yml

@@ -1,44 +0,0 @@
----
-- name: 'Check app requirements for user "{{ owner_name }}".'
-  fail:
-    msg: You must set owner name.
-  when: not owner_name
-
-- name: 'Create group "{{ owner_group }}".'
-  group:
-    name: '{{ owner_group }}'
-    state: present
-
-- name: 'Create user "{{ owner_name }}".'
-  user:
-    name: '{{ owner_name }}'
-    group: '{{ owner_group }}'
-    shell: /bin/bash
-
-- name: 'Set up user ssh keys for user "{{ owner_name }}".'
-  authorized_key:
-    user: '{{ owner_name }}'
-    key: '{{ item }}'
-    state: present
-  with_items: '{{ owner_ssh_keys }}'
-  when: owner_ssh_keys
-
-- name: 'Set up environment variables for user "{{ owner_name }}".'
-  template:
-    src: env.j2
-    dest: '/home/{{ owner_name }}/.env'
-    owner: '{{ owner_name }}'
-    group: '{{ owner_group }}'
-
-- name: 'Remove absent environment variables for user "{{ owner_name }}" from bashrc.'
-  lineinfile:
-    path: '/home/{{ owner_name }}/.bashrc'
-    regexp: '^export {{ item.key }}='
-    state: absent
-  with_dict: '{{ owner_envs }}'
-
-- name: 'Include environment variables for user "{{ owner_name }}" in bashrc.'
-  lineinfile:
-    path: '/home/{{ owner_name }}/.bashrc'
-    regexp: '^\. ~\/\.env'
-    line: '. ~/.env'

ansible/roles/blocks/owner/templates/env.j2

@@ -1,3 +0,0 @@
-{% for name, value in owner_envs.iteritems() %}
-export {{ name }}={{ value }}
-{% endfor %}

ansible/roles/blocks/ssl-certificate/defaults/main.yml

@@ -1,23 +0,0 @@
----
-# Required, allowed: self-signed, letsencrypt
-cert_type: 'self-signed'
-
-# Required, name for ssl-certificate configuration
-cert_name: ''
-
-# Required: domain owner email
-cert_email: ''
-
-# Required: domains for lets encrypt certificate creation
-cert_domains: []
-
-# Paths to store generated keys
-cert_directory: '/opt/ssl-certificates/{{ cert_name }}'
-cert_key: '{{ cert_directory }}/ssl.key'
-cert_request: '{{ cert_directory }}/ssl.csr'
-cert_certificate: '{{ cert_directory }}/ssl.crt'
-cert_dhparam: '{{ cert_directory }}/dhparam.pem'
-cert_dhparam_n: 2048
-
-# lets encrypt well-known challenge folder
-cert_le_webroot_path: /var/www/letsencrypt

ansible/roles/blocks/ssl-certificate/tasks/letsencrypt.yml

@@ -1,32 +0,0 @@
----
-- name: Check required parameters.
-  fail:
-    msg: You must set up domain and email.
-  when: not cert_domains or not cert_email
-
-- name: Create letsencrypt web root directory.
-  file:
-    name: '{{ cert_le_webroot_path }}'
-    state: directory
-
-- name: Copy notes acme server config.
-  template:
-    src: vhost.conf.j2
-    dest: "/etc/nginx/sites-enabled/{{ cert_name }}_letsencrypt.conf"
-
-- name: Restart nginx.
-  service:
-    name: nginx
-    state: restarted
-
-- name: Configure Lest Encrypt certificate.
-  include_role:
-    name: thefinn93.ansible-letsencrypt
-    private: yes
-  vars:
-    letsencrypt_webroot_path: '{{ cert_le_webroot_path }}'
-    letsencrypt_email: '{{ cert_email }}'
-    letsencrypt_cert_domains: '{{ cert_domains }}'
-    letsencrypt_renewal_command_args: '--renew-hook "systemctl restart nginx"'
-    ssl_certificate: '{{ cert_certificate }}'
-    ssl_certificate_key: '{{ cert_key }}'

ansible/roles/blocks/ssl-certificate/tasks/main.yml

@@ -1,22 +0,0 @@
----
-- name: Ensure certificate storage exists.
-  file:
-    path: '{{ cert_directory }}'
-    state: directory
-
-- include: self-signed.yml
-  when: cert_type == 'self-signed'
-
-- include: letsencrypt.yml
-  when: cert_type == 'letsencrypt'
-
-- name: Generate dhparams.
-  shell: 'openssl dhparam -out {{ cert_dhparam }} {{ cert_dhparam_n }}'
-  args:
-    creates: '{{ cert_dhparam }}'
-
-- name: Set facts about generated files.
-  set_fact:
-    '{{ cert_name }}_ssl_key': '{{ cert_key }}'
-    '{{ cert_name }}_ssl_certificate': '{{ cert_certificate }}'
-    '{{ cert_name }}_ssl_dhparam': '{{ cert_dhparam }}'

ansible/roles/blocks/ssl-certificate/tasks/self-signed.yml

@@ -1,33 +0,0 @@
----
-- name: Check certificate params.
-  fail:
-    msg: You must setup certificate file params.
-  when: not cert_certificate or not cert_key
-
-- name: Generate self signed ssl key.
-  shell: |
-    openssl genrsa \
-      -aes256 \
-      -passout pass:client11 \
-      -out {{ cert_directory }}/ssl.pass.key \
-      1024
-
-    openssl rsa \
-      -passin pass:client11 \
-      -in {{ cert_directory }}/ssl.pass.key \
-      -out {{ cert_key }}
-
-    openssl req \
-      -new \
-      -key {{ cert_key }} \
-      -out {{ cert_request }} \
-      -subj "/CN=localhost"
-
-    openssl x509 \
-      -req \
-      -days 365 \
-      -in {{ cert_request }} \
-      -signkey {{ cert_key }} \
-      -out {{ cert_certificate }}
-  args:
-    creates: '{{ cert_certificate }}'

ansible/roles/blocks/ssl-certificate/templates/vhost.conf.j2

@@ -1,13 +0,0 @@
-server {
-    listen 80;
-    server_name {{ cert_domains|join(' ') }};
-
-    location /.well-known {
-        root {{ cert_le_webroot_path }};
-        try_files $uri $uri/ =404;
-    }
-
-    location / {
-        rewrite ^ https://$host$request_uri? permanent;
-    }
-}