Configure SSL globally, and use Red Hat repo to install nginx
Showing
1 changed file
with
13 additions
and
10 deletions
| ... | @@ -6,6 +6,9 @@ | ... | @@ -6,6 +6,9 @@ |
| 6 | - name: Install NGINX | 6 | - name: Install NGINX |
| 7 | ansible.builtin.include_role: | 7 | ansible.builtin.include_role: |
| 8 | name: nginx | 8 | name: nginx |
| 9 | vars: | ||
| 10 | nginx_manage_repo: false | ||
| 11 | nginx_install_from: os_repository | ||
| 9 | 12 | ||
| 10 | - name: Configure NGINX | 13 | - name: Configure NGINX |
| 11 | ansible.builtin.include_role: | 14 | ansible.builtin.include_role: |
| ... | @@ -21,6 +24,16 @@ | ... | @@ -21,6 +24,16 @@ |
| 21 | least_conn: true | 24 | least_conn: true |
| 22 | servers: | 25 | servers: |
| 23 | - address: tlbi01.vue.gov.py:80 | 26 | - address: tlbi01.vue.gov.py:80 |
| 27 | ssl: | ||
| 28 | certificate: /etc/letsencrypt/live/vueapp.test.vue.gov.py/fullchain.pem | ||
| 29 | certificate_key: /etc/letsencrypt/live/vueapp.test.vue.gov.py/privkey.pem | ||
| 30 | prefer_server_ciphers: true | ||
| 31 | session_cache: | ||
| 32 | shared: | ||
| 33 | name: SSL | ||
| 34 | size: 10m | ||
| 35 | session_timeout: 10m | ||
| 36 | ssl_ciphers: PROFILE=SYSTEM | ||
| 24 | servers: | 37 | servers: |
| 25 | - core: | 38 | - core: |
| 26 | listen: | 39 | listen: |
| ... | @@ -47,16 +60,6 @@ | ... | @@ -47,16 +60,6 @@ |
| 47 | - port: 443 | 60 | - port: 443 |
| 48 | ssl: true | 61 | ssl: true |
| 49 | server_name: vueapp.test.vue.gov.py | 62 | server_name: vueapp.test.vue.gov.py |
| 50 | ssl: | ||
| 51 | certificate: /etc/letsencrypt/live/vueapp.test.vue.gov.py/fullchain.pem | ||
| 52 | certificate_key: /etc/letsencrypt/live/vueapp.test.vue.gov.py/privkey.pem | ||
| 53 | prefer_server_ciphers: true | ||
| 54 | session_cache: | ||
| 55 | shared: | ||
| 56 | name: SSL | ||
| 57 | size: 10m | ||
| 58 | session_timeout: 10m | ||
| 59 | ssl_ciphers: PROFILE=SYSTEM | ||
| 60 | log: | 63 | log: |
| 61 | access: | 64 | access: |
| 62 | - path: /var/log/nginx/access.log | 65 | - path: /var/log/nginx/access.log | ... | ... |
-
Please register or sign in to post a comment