ansible/roles/httpd/website/tasks/main.yml
Ricky Elrod 5900f6e6c2 First go at letsencrypt automation
Signed-off-by: Ricky Elrod <relrod@redhat.com>
2018-05-17 05:07:56 +00:00

75 lines
1.4 KiB
YAML

# Expected vars
# - site_name...
# - cert_name...
# - server_aliases: []
# - server_admin: webmaster@fedoraproject.org
# - ssl: true
# - sslonly: false
# - SSLCertificateChainFile: ""
# - gzip: false
- name: Create site directory in httpd/conf.d/{{site_name}}
file: >
dest=/etc/httpd/conf.d/{{site_name}}
state=directory
owner=root
group=root
mode=0755
notify:
- reload proxyhttpd
tags:
- httpd
- httpd/website
- name: Letsencrypt certificate stuff
include_role: name=letsencrypt
when: certbot == True
- name: Copy over primary template for {{site_name}}
template: >
src=website.conf
dest=/etc/httpd/conf.d/{{site_name}}.conf
owner=root
group=root
mode=0644
notify:
- reload proxyhttpd
tags:
- httpd
- httpd/website
- h2
- name: Copy over some subordinate templates for {{site_name}}
template: >
src={{item}}.conf
dest=/etc/httpd/conf.d/{{site_name}}/{{item}}.conf
owner=root
group=root
mode=0644
with_items:
- logs
- robots
- securityheaders
notify:
- reload proxyhttpd
tags:
- httpd
- httpd/website
- name: And lastly, the robots.txt file
copy: >
src={{item}}
dest=/srv/web/robots.txt.{{site_name}}
mode=0644
owner=root
group=root
setype=httpd_sys_content_t
with_first_found:
- robots/robots.txt.{{site_name}}
- robots/robots.txt
notify:
- reload proxyhttpd
tags:
- httpd
- httpd/website
- robots