Add SSL certificate to homepage
and rewrite some tasks
This commit is contained in:
ansible
15
ansible/roles/homepage/meta/main.yml
Normal file
15
ansible/roles/homepage/meta/main.yml
Normal file
@@ -0,0 +1,15 @@
|
||||
---
|
||||
dependencies:
|
||||
- role: ssl-certificate
|
||||
cert_type: letsencrypt
|
||||
cert_name: '{{ homepage_name }}'
|
||||
cert_email: anwinged@ya.ru
|
||||
cert_domains:
|
||||
- '{{ homepage_domain }}'
|
||||
- 'www.{{ homepage_domain }}'
|
||||
|
||||
- role: static-site
|
||||
static_site_name: '{{ homepage_name }}'
|
||||
static_site_domain: '{{ homepage_domain }}'
|
||||
static_site_dir: '{{ homepage_dir }}'
|
||||
static_site_template: homepage.conf.j2
|
31
ansible/roles/homepage/templates/homepage.conf.j2
Executable file
31
ansible/roles/homepage/templates/homepage.conf.j2
Executable file
@@ -0,0 +1,31 @@
|
||||
server {
|
||||
server_name www.{{ homepage_domain }};
|
||||
return 301 $scheme://{{ homepage_domain }}$request_uri;
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl http2;
|
||||
server_name {{ homepage_domain }};
|
||||
|
||||
ssl on;
|
||||
ssl_certificate {{ vars[homepage_name + "_ssl_certificate"] }};
|
||||
ssl_certificate_key {{ vars[homepage_name + "_ssl_key"] }};
|
||||
ssl_trusted_certificate {{ vars[homepage_name + "_ssl_certificate"] }};
|
||||
|
||||
ssl_session_cache shared:SSL:50m;
|
||||
ssl_session_timeout 5m;
|
||||
ssl_stapling on;
|
||||
ssl_stapling_verify on;
|
||||
|
||||
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||||
ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
|
||||
|
||||
ssl_dhparam {{ vars[homepage_name + "_ssl_dhparam"] }};
|
||||
ssl_prefer_server_ciphers on;
|
||||
|
||||
location / {
|
||||
root {{ homepage_dir }}/current;
|
||||
index index.html;
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
}
|
4
ansible/roles/homepage/vars/main.yml
Normal file
4
ansible/roles/homepage/vars/main.yml
Normal file
@@ -0,0 +1,4 @@
|
||||
---
|
||||
homepage_name: anwinged_homepage
|
||||
homepage_domain: anwinged.ru
|
||||
homepage_dir: /var/www/anwinged
|
Reference in New Issue
Block a user