3f8c8548 by DevOps

Put a layer of indirection for VUE specific variables

1 parent c2083df2
1 [glb] 1 [glb]
2 mtglb02.vue.gov.py 2 mtglb02.vue.gov.py env=test
......
No preview for this file type
1 #upstreams
2 jbosseapbalancer_server_fqdn: tlbi01.vue.gov.py
3 exportafacil_server_fqdn: texportafacil01.vue.gov.py
4 sso_server_fqdn: psso01.vue.gov.py
5
6 #domains
7 vue_domain: vueapp.test.vue.gov.py
8 datos_domain: datos.test.vue.gov.py
9 exportafacil_domain: exportafacil.test.vue.gov.py
10 sso_domain: sso.test.vue.gov.py
11
12
...@@ -2,6 +2,8 @@ ...@@ -2,6 +2,8 @@
2 - hosts: glb 2 - hosts: glb
3 collections: 3 collections:
4 - nginxinc.nginx_core 4 - nginxinc.nginx_core
5 vars_files:
6 - "vars_files/{{ env }}.yml"
5 tasks: 7 tasks:
6 - name: Install NGINX 8 - name: Install NGINX
7 ansible.builtin.include_role: 9 ansible.builtin.include_role:
...@@ -34,21 +36,21 @@ ...@@ -34,21 +36,21 @@
34 - name: jbosseap 36 - name: jbosseap
35 least_conn: true 37 least_conn: true
36 servers: 38 servers:
37 - address: tlbi01.vue.gov.py:80 39 - address: "{{ jbosseapbalancer_server_fqdn }}"
38 40
39 - name: exportafacil 41 - name: exportafacil
40 least_conn: true 42 least_conn: true
41 servers: 43 servers:
42 - address: texportafacil01.vue.gov.py 44 - address: "{{ exportafacil_server_fqdn }}"
43 45
44 - name: sso 46 - name: sso
45 least_conn: true 47 least_conn: true
46 servers: 48 servers:
47 - address: psso01.vue.gov.py 49 - address: "{{ sso_server_fqdn }}"
48 50
49 ssl: 51 ssl:
50 certificate: /etc/letsencrypt/live/vueapp.test.vue.gov.py/fullchain.pem 52 certificate: "/etc/letsencrypt/live/{{ vue_domain }}/fullchain.pem"
51 certificate_key: /etc/letsencrypt/live/vueapp.test.vue.gov.py/privkey.pem 53 certificate_key: "/etc/letsencrypt/live/{{ vue_domain }}/privkey.pem"
52 prefer_server_ciphers: true 54 prefer_server_ciphers: true
53 session_cache: 55 session_cache:
54 shared: 56 shared:
...@@ -62,7 +64,7 @@ ...@@ -62,7 +64,7 @@
62 - core: 64 - core:
63 listen: 65 listen:
64 - port: 80 66 - port: 80
65 server_name: vueapp.test.vue.gov.py 67 server_name: "{{ vue_domain }}"
66 #Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test 68 #Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test
67 rewrite: 69 rewrite:
68 return: 70 return:
...@@ -76,7 +78,7 @@ ...@@ -76,7 +78,7 @@
76 - port: 443 78 - port: 443
77 http2: true 79 http2: true
78 ssl: true 80 ssl: true
79 server_name: vueapp.test.vue.gov.py 81 server_name: "{{ vue_domain }}"
80 locations: 82 locations:
81 - location: / 83 - location: /
82 proxy: 84 proxy:
...@@ -109,7 +111,7 @@ ...@@ -109,7 +111,7 @@
109 - core: 111 - core:
110 listen: 112 listen:
111 - port: 80 113 - port: 80
112 server_name: datos.test.vue.gov.py 114 server_name: "{{ datos_domain }}"
113 #log: 115 #log:
114 # access: 116 # access:
115 # - path: /var/log/nginx/access.log 117 # - path: /var/log/nginx/access.log
...@@ -126,7 +128,7 @@ ...@@ -126,7 +128,7 @@
126 - port: 443 128 - port: 443
127 http2: true 129 http2: true
128 ssl: true 130 ssl: true
129 server_name: datos.test.vue.gov.py 131 server_name: "{{ datos_domain }}"
130 #log: 132 #log:
131 # access: 133 # access:
132 # - path: /var/log/nginx/access.log 134 # - path: /var/log/nginx/access.log
...@@ -154,7 +156,7 @@ ...@@ -154,7 +156,7 @@
154 - core: 156 - core:
155 listen: 157 listen:
156 - port: 80 158 - port: 80
157 server_name: exportafacil.test.vue.gov.py 159 server_name: "{{ exportafacil_domain }}"
158 160
159 #Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test 161 #Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test
160 rewrite: 162 rewrite:
...@@ -169,7 +171,7 @@ ...@@ -169,7 +171,7 @@
169 - port: 443 171 - port: 443
170 http2: true 172 http2: true
171 ssl: true 173 ssl: true
172 server_name: exportafacil.test.vue.gov.py 174 server_name: "{{ exportafacil_domain }}"
173 175
174 locations: 176 locations:
175 - location: / 177 - location: /
...@@ -208,7 +210,7 @@ ...@@ -208,7 +210,7 @@
208 - core: 210 - core:
209 listen: 211 listen:
210 - port: 80 212 - port: 80
211 server_name: sso.test.vue.gov.py 213 server_name: "{{ sso_domain }}"
212 #Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test 214 #Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test
213 rewrite: 215 rewrite:
214 return: 216 return:
...@@ -221,7 +223,7 @@ ...@@ -221,7 +223,7 @@
221 - port: 443 223 - port: 443
222 http2: true 224 http2: true
223 ssl: true 225 ssl: true
224 server_name: sso.test.vue.gov.py 226 server_name: "{{ sso_domain }}"
225 locations: 227 locations:
226 - location: / 228 - location: /
227 proxy: 229 proxy:
......
Styling with Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!