b3e2adf3 by Gustavo Calcaterra Committed by DevOps

Configure SSL globally, and use Red Hat repo to install nginx

1 parent e8db918c
...@@ -6,6 +6,9 @@ ...@@ -6,6 +6,9 @@
6 - name: Install NGINX 6 - name: Install NGINX
7 ansible.builtin.include_role: 7 ansible.builtin.include_role:
8 name: nginx 8 name: nginx
9 vars:
10 nginx_manage_repo: false
11 nginx_install_from: os_repository
9 12
10 - name: Configure NGINX 13 - name: Configure NGINX
11 ansible.builtin.include_role: 14 ansible.builtin.include_role:
...@@ -21,6 +24,16 @@ ...@@ -21,6 +24,16 @@
21 least_conn: true 24 least_conn: true
22 servers: 25 servers:
23 - address: tlbi01.vue.gov.py:80 26 - address: tlbi01.vue.gov.py:80
27 ssl:
28 certificate: /etc/letsencrypt/live/vueapp.test.vue.gov.py/fullchain.pem
29 certificate_key: /etc/letsencrypt/live/vueapp.test.vue.gov.py/privkey.pem
30 prefer_server_ciphers: true
31 session_cache:
32 shared:
33 name: SSL
34 size: 10m
35 session_timeout: 10m
36 ssl_ciphers: PROFILE=SYSTEM
24 servers: 37 servers:
25 - core: 38 - core:
26 listen: 39 listen:
...@@ -47,16 +60,6 @@ ...@@ -47,16 +60,6 @@
47 - port: 443 60 - port: 443
48 ssl: true 61 ssl: true
49 server_name: vueapp.test.vue.gov.py 62 server_name: vueapp.test.vue.gov.py
50 ssl:
51 certificate: /etc/letsencrypt/live/vueapp.test.vue.gov.py/fullchain.pem
52 certificate_key: /etc/letsencrypt/live/vueapp.test.vue.gov.py/privkey.pem
53 prefer_server_ciphers: true
54 session_cache:
55 shared:
56 name: SSL
57 size: 10m
58 session_timeout: 10m
59 ssl_ciphers: PROFILE=SYSTEM
60 log: 63 log:
61 access: 64 access:
62 - path: /var/log/nginx/access.log 65 - path: /var/log/nginx/access.log
......
Styling with Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!