3f8c8548 by DevOps

Put a layer of indirection for VUE specific variables

1 parent c2083df2
[glb]
mtglb02.vue.gov.py
mtglb02.vue.gov.py env=test
......
No preview for this file type
#upstreams
jbosseapbalancer_server_fqdn: tlbi01.vue.gov.py
exportafacil_server_fqdn: texportafacil01.vue.gov.py
sso_server_fqdn: psso01.vue.gov.py
#domains
vue_domain: vueapp.test.vue.gov.py
datos_domain: datos.test.vue.gov.py
exportafacil_domain: exportafacil.test.vue.gov.py
sso_domain: sso.test.vue.gov.py
......@@ -2,6 +2,8 @@
- hosts: glb
collections:
- nginxinc.nginx_core
vars_files:
- "vars_files/{{ env }}.yml"
tasks:
- name: Install NGINX
ansible.builtin.include_role:
......@@ -34,21 +36,21 @@
- name: jbosseap
least_conn: true
servers:
- address: tlbi01.vue.gov.py:80
- address: "{{ jbosseapbalancer_server_fqdn }}"
- name: exportafacil
least_conn: true
servers:
- address: texportafacil01.vue.gov.py
- address: "{{ exportafacil_server_fqdn }}"
- name: sso
least_conn: true
servers:
- address: psso01.vue.gov.py
- address: "{{ sso_server_fqdn }}"
ssl:
certificate: /etc/letsencrypt/live/vueapp.test.vue.gov.py/fullchain.pem
certificate_key: /etc/letsencrypt/live/vueapp.test.vue.gov.py/privkey.pem
certificate: "/etc/letsencrypt/live/{{ vue_domain }}/fullchain.pem"
certificate_key: "/etc/letsencrypt/live/{{ vue_domain }}/privkey.pem"
prefer_server_ciphers: true
session_cache:
shared:
......@@ -62,7 +64,7 @@
- core:
listen:
- port: 80
server_name: vueapp.test.vue.gov.py
server_name: "{{ vue_domain }}"
#Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test
rewrite:
return:
......@@ -76,7 +78,7 @@
- port: 443
http2: true
ssl: true
server_name: vueapp.test.vue.gov.py
server_name: "{{ vue_domain }}"
locations:
- location: /
proxy:
......@@ -109,7 +111,7 @@
- core:
listen:
- port: 80
server_name: datos.test.vue.gov.py
server_name: "{{ datos_domain }}"
#log:
# access:
# - path: /var/log/nginx/access.log
......@@ -126,7 +128,7 @@
- port: 443
http2: true
ssl: true
server_name: datos.test.vue.gov.py
server_name: "{{ datos_domain }}"
#log:
# access:
# - path: /var/log/nginx/access.log
......@@ -154,7 +156,7 @@
- core:
listen:
- port: 80
server_name: exportafacil.test.vue.gov.py
server_name: "{{ exportafacil_domain }}"
#Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test
rewrite:
......@@ -169,7 +171,7 @@
- port: 443
http2: true
ssl: true
server_name: exportafacil.test.vue.gov.py
server_name: "{{ exportafacil_domain }}"
locations:
- location: /
......@@ -208,7 +210,7 @@
- core:
listen:
- port: 80
server_name: sso.test.vue.gov.py
server_name: "{{ sso_domain }}"
#Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test
rewrite:
return:
......@@ -221,7 +223,7 @@
- port: 443
http2: true
ssl: true
server_name: sso.test.vue.gov.py
server_name: "{{ sso_domain }}"
locations:
- location: /
proxy:
......
Styling with Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!