Ansible Role: Nginx Certbot

This Ansible role helps set up Nginx web servers and automatically uses Certbot to secure them with HTTPS using Let's Encrypt certificates.

Requirements

• You need to have Ansible installed on your control node.
• Your domain name(s) must point to the server(s) where Nginx is running.

Role Variables

Here are the variables used in this role with their explanations:

• nginx_certbot_domain_name: The domain name for which the SSL certificate will be requested.
• nginx_certbot_certbot_email: The email address for registering the Let's Encrypt certificate.
• nginx_certbot_deny_http: Whether to block HTTP access after HTTPS is enabled. The default is false.
• nginx_certbot_proxy_protocol: Whether to support the nginx PROXY protocol. The default is false.
• nginx_certbot_app: Settings for the application served by Nginx:
  • name: The name of the application.
  • url: The URL where the application is available.
  • http_template_name: Name of the Nginx HTTP template. You can find some examples in the templates directory.
  • upstream_template_name: Name of the Nginx upstream template. You can find some examples in the templates directory.

You can change these variables in your playbook to fit your specific setup and needs.

Dependencies

None.

Example Playbook

- hosts: web_servers
  roles:
    - role: chadek.nginx_certbot
      vars:
        nginx_certbot_domain_name: app.example.com
        nginx_certbot_certbot_email: some.mail@example.com
        nginx_certbot_deny_http: false
        nginx_certbot_proxy_protocol: false
        nginx_certbot_app:
          name: app
          url: "http://localhost:2000"
          http_template_name: root
          upstream_template_name: root_upstream

License

This role is licensed under the MIT License.

Author Information

This role was created by Chadek.

Feedback and Contributions

If you have any feedback or want to contribute, please open an issue or submit a pull request on GitHub.