Rôle Ansible Nginx

  

• Rôle :
  • plateformes
  • installation
  • Comportement de fusion
• Playbooks (version fusion) :
  • installer et configurer : Nginx
    • installer : Nginx, référentiel : distribution
    • installer : Nginx, référentiel : nginx
    • configurer : nginx.conf
    • configurer : virtualhost.conf socket tcp/ip
    • configurer : virtualhost.conf socket unix
    • configurer : ajouter plusieurs virtualhost.conf
• Playbooks (version complète) :
  • installer et configurer : Nginx
    • installer : Nginx, référentiel : distribution
    • installer : Nginx, référentiel : nginx
    • configurer : nginx.conf
    • configurer : virtualhost.conf socket tcp/ip
    • configurer : virtualhost.conf socket unix
    • configurer : ajouter plusieurs virtualhost.conf

Plateformes

Test	repo : distribution	repo : nginx
Debian 11	Nginx 1.18	nginx.org
Debian 10	Nginx 1.14	nginx.org
Ubuntu 20.04	Nginx 1.18-1.20	nginx.org
Ubuntu 18.04	Nginx 1.18-1.20	nginx.org
Oracle Linux 8	Nginx 1.14-1.20	nginx.org
Rocky Linux 8	Nginx 1.14-1.20	nginx.org

Installation

ansible-galaxy install darexsu.nginx --force

Comportement de fusion

Remplacer ou fusionner des dictionnaires (avec "hash_behaviour=replace" dans ansible.cfg) :

# Remplacer               # Fusionner
---                       ---
  vars:                   vars:
    dict:                 merge:
      a: "value"          dict: 
      b: "value"          a: "value" 
                          b: "value"

# Comment fonctionne la fusion ?
Vos vars [host_vars]  -->  vars par défaut [rôle actuel] --> vars par défaut [inclus rôle]
  
  dict:               dict:              dict:
    a: "1" -->        a: "1"    -->      a: "1"
                    b: "2"    -->      b: "2"
                                   c: "3"
    

Installer et configurer : Nginx (version fusion)

---
- hosts: all
  become: true

  vars:
    merge:
      # Nginx
      nginx:
        enabled: true
        repo: "nginx"
      # Nginx -> installer
      nginx_install:
        enabled: true
      # Nginx -> configurer -> nginx.conf
      nginx_conf:
        enabled: true
        data:
          user: "www-data"
          worker_processes: "auto"
          error_log: "/var/log/nginx/error.log notice"
          pidfile: "/var/run/nginx.pid"
          worker_connections: "1024"
      #   ...
      # Nginx -> configurer -> {virtualhost}.conf
      nginx_virtualhost:
        default_conf:
          enabled: true
          file: "default.conf"
          state: "present"
          src: "nginx_virtualhost.j2"
          backup: false
          data:
            listen_port: "80"
            listen_ipv6: false
            server_name: "localhost"
            root: "/usr/share/nginx/html"
            index: "index.html index.htm index.php"
            error_page: ""
            access_log: false
            error_log: false
            tcp_ip_socket:
              enabled: false
              listen: "127.0.0.1:9000"
            unix_socket:
              enabled: true
              file: "php-fpm.sock"
 
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role:
        name: darexsu.nginx
    

Installer : Nginx, référentiel : distribution (version fusion)

---
- hosts: all
  become: true

  vars:
    merge:
      # Nginx
      nginx:
        enabled: true
        repo: "distribution"
      # Nginx -> installer
      nginx_install:
        enabled: true
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx

Installer : Nginx, référentiel : nginx (version fusion)

---
- hosts: all
  become: true

  vars:
    merge:
      # Nginx
      nginx:
        enabled: true
        repo: "nginx"
      # Nginx -> installer
      nginx_install:
        enabled: true
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx
    

Configurer : nginx.conf (version fusion)

---
- hosts: all
  become: true

  vars:
    merge:
      # Nginx
      nginx:
        enabled: true
        repo: "nginx"
      # Nginx -> configurer -> nginx.conf
      nginx_conf:
        enabled: true
        file: "nginx.conf"
        src: "nginx_conf.j2"
        backup: false
        data:
          user: "www-data"
          worker_processes: "auto"
          error_log: "/var/log/nginx/error.log notice"
          pidfile: "/var/run/nginx.pid"
          worker_connections: "1024"
          multi_accept: "off"
          mime_file_path: "/etc/nginx/mime.types"
          access_log: "/var/log/nginx/access.log"
          sendfile: "off"
          tcp_nopush: "off"
          tcp_nodelay: "on"
          keepalive_timeout: "75s"
          keepalive_requests: "1000"
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx
    

Configurer : virtualhost.conf socket tcpip (version fusion)

---
- hosts: all
  become: true

  vars:
    merge:
      # Nginx
      nginx:
        enabled: true
      # Nginx -> configurer -> {virtualhost}.conf
      nginx_virtualhost:
        default_conf:
          enabled: true
          file: "default.conf"
          state: "present"
          src: "nginx_virtualhost.j2"
          backup: false
          data:
            listen_port: "80"
            listen_ipv6: false
            server_name: "localhost"
            root: "/usr/share/nginx/html"
            index: "index.html index.htm index.php"
            error_page: ""
            access_log: false
            error_log: false
            tcp_ip_socket:
              enabled: true
              listen: "127.0.0.1:9000"
            unix_socket:
              enabled: false
              file: "php-fpm.sock"
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx
    

Configurer : virtualhost.conf socket unix (version fusion)

---
- hosts: all
  become: true

  vars:
    merge:
      # Nginx
      nginx:
        enabled: true
      # Nginx -> configurer -> {virtualhost}.conf
      nginx_virtualhost:
        default_conf:
          enabled: true
          file: "default.conf"
          state: "present"
          src: "nginx_virtualhost.j2"
          backup: false
          data:
            listen_port: "80"
            listen_ipv6: false
            server_name: "localhost"
            root: "/usr/share/nginx/html"
            index: "index.html index.htm index.php"
            error_page: ""
            access_log: false
            error_log: false
            tcp_ip_socket:
              enabled: true
              listen: "127.0.0.1:9000"
            unix_socket:
              enabled: false
              file: "php-fpm.sock"
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx    

Configurer : ajouter plusieurs virtualhost.conf (version fusion)

---
- hosts: all
  become: true

  vars:
    merge:
      # Nginx
      nginx:
        enabled: true
      # Nginx -> configurer -> default.conf
      nginx_virtualhost:
        default_conf:
          enabled: true
          file: "default.conf"
          state: "present"
          src: "nginx_virtualhost.j2"
          backup: false
          data:
            listen_port: "80"
            listen_ipv6: false
            server_name: "localhost"
            root: "/usr/share/nginx/html"
            index: "index.html index.htm index.php"
            error_page: ""
            access_log: false
            error_log: false
            tcp_ip_socket:
              enabled: true
              listen: "127.0.0.1:9000"
            unix_socket:
              enabled: false
              file: "php-fpm.sock"
      # Nginx -> configurer -> new.conf
        new_conf:
          enabled: true
          file: "new.conf"
          state: "present"
          src: "nginx_virtualhost.j2"
          backup: false
          data:
            listen_port: "80"
            listen_ipv6: false
            server_name: "localhost"
            root: "/usr/share/nginx/html"
            index: "index.html index.htm index.php"
            error_page: ""
            access_log: false
            error_log: false
            tcp_ip_socket:
              enabled: true
              listen: "127.0.0.1:9001"
            unix_socket:
              enabled: false
              file: "php-fpm.sock"
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx    

Installer et configurer : Nginx (version complète)

---
- hosts: all
  become: true

  vars:
    # Nginx
    nginx:
      enabled: true
      repo: "nginx"
      service:
        enabled: true
        state: "started"
    # Nginx -> installer
    nginx_install:
      enabled: true
    # Nginx -> configurer -> nginx.conf
    nginx_conf:
      enabled: true
      file: "nginx.conf"
      src: "nginx_conf.j2"
      backup: false
      data:
        user: "www-data"
        worker_processes: "auto"
        error_log: "/var/log/nginx/error.log notice"
        pidfile: "/var/run/nginx.pid"
        worker_connections: "1024"
        multi_accept: "off"
        mime_file_path: "/etc/nginx/mime.types"
        access_log: "/var/log/nginx/access.log"
        sendfile: "off"
        tcp_nopush: "off"
        tcp_nodelay: "on"
        keepalive_timeout: "75s"
        keepalive_requests: "1000"
    # Nginx -> configurer -> {virtualhost}.conf
    nginx_virtualhost:
      default_conf:
        enabled: true
        file: "default.conf"
        state: "present"
        src: "nginx_virtualhost.j2"
        backup: false
        data:
          listen_port: "80"
          listen_ipv6: false
          server_name: "localhost"
          root: "/usr/share/nginx/html"
          index: "index.html index.htm index.php"
          error_page: ""
          access_log: false
          error_log: false
          tcp_ip_socket:
            enabled: false
            listen: "127.0.0.1:9000"
          unix_socket:
            enabled: true
            file: "php-fpm.sock"
 
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role:
        name: darexsu.nginx
    

Installer : Nginx, référentiel : distribution (version complète)

---
- hosts: all
  become: true

  vars:
    # Nginx
    nginx:
      enabled: true
      repo: "distribution"
      service:
        enabled: true
        state: "started"
    # Nginx -> installer
    nginx_install:
      enabled: true
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx

Installer : Nginx, référentiel : nginx (version complète)

---
- hosts: all
  become: true

  vars:
    # Nginx
    nginx:
      enabled: true
      repo: "nginx"
      service:
        enabled: true
        state: "started"
    # Nginx -> installer
    nginx_install:
      enabled: true
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx
    

Configurer : nginx.conf (version complète)

---
- hosts: all
  become: true

  vars:
    # Nginx
    nginx:
      enabled: true
      repo: "nginx"
      service:
        enabled: true
        state: "started"
    # Nginx -> configurer -> nginx.conf
    nginx_conf:
      enabled: true
      file: "nginx.conf"
      src: "nginx_conf.j2"
      backup: false
      data:
        user: "www-data"
        worker_processes: "auto"
        error_log: "/var/log/nginx/error.log notice"
        pidfile: "/var/run/nginx.pid"
        worker_connections: "1024"
        multi_accept: "off"
        mime_file_path: "/etc/nginx/mime.types"
        access_log: "/var/log/nginx/access.log"
        sendfile: "off"
        tcp_nopush: "off"
        tcp_nodelay: "on"
        keepalive_timeout: "75s"
        keepalive_requests: "1000"
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx
    

Configurer : virtualhost.conf socket tcpip (version complète)

---
- hosts: all
  become: true

  vars:
    # Nginx
    nginx:
      enabled: true
      repo: "nginx"
      service:
        enabled: true
        state: "started"
    # Nginx -> configurer -> {virtualhost}.conf
    nginx_virtualhost:
      default_conf:
        enabled: true
        file: "default.conf"
        state: "present"
        src: "nginx_virtualhost.j2"
        backup: false
        data:
          listen_port: "80"
          listen_ipv6: false
          server_name: "localhost"
          root: "/usr/share/nginx/html"
          index: "index.html index.htm index.php"
          error_page: ""
          access_log: false
          error_log: false
          tcp_ip_socket:
            enabled: true
            listen: "127.0.0.1:9000"
          unix_socket:
            enabled: false
            file: "php-fpm.sock"
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx
    

Configurer : virtualhost.conf socket unix (version complète)

---
- hosts: all
  become: true

  vars:
    # Nginx
    nginx:
      enabled: true
      repo: "nginx"
      service:
        enabled: true
        state: "started"
    # Nginx -> configurer -> {virtualhost}.conf
    nginx_virtualhost:
      default_conf:
        enabled: true
        file: "default.conf"
        state: "present"
        src: "nginx_virtualhost.j2"
        backup: false
        data:
          listen_port: "80"
          listen_ipv6: false
          server_name: "localhost"
          root: "/usr/share/nginx/html"
          index: "index.html index.htm index.php"
          error_page: ""
          access_log: false
          error_log: false
          tcp_ip_socket:
            enabled: true
            listen: "127.0.0.1:9000"
          unix_socket:
            enabled: false
            file: "php-fpm.sock"
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx    

Configurer : ajouter plusieurs virtualhost.conf (version complète)

---
- hosts: all
  become: true

  vars:
    # Nginx
    nginx:
      enabled: true
      repo: "nginx"
      service:
        enabled: true
        state: "started"
    # Nginx -> configurer -> default.conf
    nginx_virtualhost:
      default_conf:
        enabled: true
        file: "default.conf"
        state: "present"
        src: "nginx_virtualhost.j2"
        backup: false
        data:
          listen_port: "80"
          listen_ipv6: false
          server_name: "localhost"
          root: "/usr/share/nginx/html"
          index: "index.html index.htm index.php"
          error_page: ""
          access_log: false
          error_log: false
          tcp_ip_socket:
            enabled: true
            listen: "127.0.0.1:9000"
          unix_socket:
            enabled: false
            file: "php-fpm.sock"
    # Nginx -> configurer -> new.conf
      new_conf:
        enabled: true
        file: "new.conf"
        state: "present"
        src: "nginx_virtualhost.j2"
        backup: false
        data:
          listen_port: "80"
          listen_ipv6: false
          server_name: "localhost"
          root: "/usr/share/nginx/html"
          index: "index.html index.htm index.php"
          error_page: ""
          access_log: false
          error_log: false
          tcp_ip_socket:
            enabled: true
            listen: "127.0.0.1:9001"
          unix_socket:
            enabled: false
            file: "php-fpm.sock"
  
  tasks:
    - name: inclure le rôle darexsu.nginx
      include_role: 
        name: darexsu.nginx