blob: 8cd854d7f1677f592b06fb827f0d1097896fdf9a (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
- name: Set up packages
ansible.builtin.apt:
update_cache: true
pkg:
- nginx
state: present
- name: Install package for setting htpasswd
package:
name: python3-passlib
- name: Ensure web path exists
file:
path: /var/www/{{ media_server_name }}/{{ emacsconf_year }}/backstage
state: directory
- name: Create group
group:
name: "{{ emacsconf_group }}"
state: present
- name: Create user
user:
name: "{{ emacsconf_user }}"
group: "{{ emacsconf_group }}"
state: present
- name: Change ownership and permissions
file:
path: /var/www/{{ media_server_name }}/{{ emacsconf_year }}
owner: "{{ emacsconf_user }}"
group: "{{ emacsconf_group }}"
mode: "u=rwX,g=rwX,o=rX"
recurse: true
- name: Add public key for authorized access
ansible.posix.authorized_key:
user: "{{ emacsconf_user }}"
state: present
key: '{{ item }}'
with_file:
- ../../base/files/keys/sachac
- ../../base/files/keys/orga
- name: Create htpasswd entry
htpasswd:
create: yes
name: "{{ emacsconf_backstage_user }}"
password: "{{ emacsconf_backstage_password }}"
path: /etc/nginx/sites-available/{{ media_server_name }}-{{ emacsconf_year }}-htpasswd
- name: Create Nginx include
template:
src: nginx-include
dest: /etc/nginx/sites-available/{{ media_server_name }}-{{ emacsconf_year }}-include
- name: Create main configuration if needed
template:
src: nginx-site-config
dest: /etc/nginx/sites-available/{{ media_server_name }}
force: no
- name: Make sure main configuration is enabled
file:
src: /etc/nginx/sites-available/{{ media_server_name }}
dest: /etc/nginx/sites-enabled/{{ media_server_name }}
owner: "{{ emacsconf_user }}"
group: "{{ emacsconf_group }}"
force: no
state: link
- name: Include it in the main configuration
lineinfile:
path: /etc/nginx/sites-available/{{ media_server_name }}
regexp: "{{ media_server_name }}-{{ emacsconf_year }}-include"
line: " include sites-available/{{ media_server_name }}-{{ emacsconf_year }}-include;"
insertafter: root
- name: Reload configuration
service:
name: nginx
state: reloaded
|
