hispanico.letsencrypt-nginx-revproxy

ansible-letsencrypt-nginx-revproxy

=========

This tool sets up Nginx as a reverse proxy for multiple websites and helps generate Let's Encrypt certificates.

Requirements

You need Ansible version 1.9 or higher to use this role.

Role Variables

Here are the default settings:

nginx_revproxy_sites:                                         # List of sites for reverse proxy
  example.com:                                                # Domain name
    domains:                                                  # List of server name alternatives
      - example.com
      - www.example.com
    upstreams:                                                # List of upstream servers
      - { backend_address: 192.168.0.100, backend_port: 80 }
      - { backend_address: 192.168.0.101, backend_port: 8080 }
    letsencrypt: true                                        # Set to True if you're using the Let's Encrypt role
    letsencrypt_email: '[email protected]'

Dependencies

hispanico.nginx-revproxy

Example Playbook

This example shows how to configure Nginx as a reverse proxy for the following sites:

example.org with a self-signed SSL certificate
example.com with an SSL certificate generated via Let's Encrypt.

  - hosts: all
    roles:
      - ansible-nginx-revproxy
      - ansible-letsencrypt-nginx-revproxy
    vars:
      nginx_revproxy_sites:
        example.org:
          domains:
            - example.org
            - www.example.org
          upstreams:
            - { backend_address: 192.168.0.200, backend_port: 80 }
            - { backend_address: 192.168.0.201, backend_port: 80 }
          letsencrypt: false

        example.com:
          domains:
            - example.com
            - www.example.com
          upstreams:
            - { backend_address: 192.168.0.100, backend_port: 80 }
            - { backend_address: 192.168.0.101, backend_port: 80 }
          letsencrypt: true