Replace edge proxy with nginx
The config makes more sense, and it has more of the features I need, which will come later.
This commit is contained in:
@ -1,15 +1,15 @@
|
||||
- name: fail2ban filter
|
||||
template:
|
||||
src: files/haproxy-fail2ban-filter.conf
|
||||
dest: /etc/fail2ban/filter.d/haproxy-basic.conf
|
||||
src: files/nginx-fail2ban-filter.conf
|
||||
dest: /etc/fail2ban/filter.d/nginx-tcp.conf
|
||||
mode: "0600"
|
||||
become: true
|
||||
register: fail2ban_filter
|
||||
|
||||
- name: fail2ban jail
|
||||
template:
|
||||
src: files/haproxy-fail2ban-jail.conf
|
||||
dest: /etc/fail2ban/jail.d/haproxy.conf
|
||||
src: files/nginx-fail2ban-jail.conf
|
||||
dest: /etc/fail2ban/jail.d/nginx.conf
|
||||
mode: "0600"
|
||||
become: true
|
||||
register: fail2ban_jail
|
||||
|
@ -1,27 +0,0 @@
|
||||
- name: Install Haproxy
|
||||
package:
|
||||
name: haproxy
|
||||
become: true
|
||||
|
||||
- name: Haproxy config
|
||||
template:
|
||||
src: files/haproxy.cfg
|
||||
dest: /etc/haproxy/haproxy.cfg
|
||||
validate: /usr/sbin/haproxy -c -- %s
|
||||
mode: "0644"
|
||||
backup: yes
|
||||
become: true
|
||||
register: haproxy_config
|
||||
|
||||
- name: Enable Haproxy
|
||||
service:
|
||||
name: haproxy
|
||||
enabled: true
|
||||
become: true
|
||||
|
||||
- name: Restart Haproxy
|
||||
service:
|
||||
name: haproxy
|
||||
state: restarted
|
||||
become: true
|
||||
when: haproxy_config.changed
|
@ -1,5 +1,5 @@
|
||||
- name: Configure HAproxy
|
||||
include: haproxy.yml
|
||||
- name: Configure Nginx
|
||||
include: nginx.yml
|
||||
|
||||
- name: Configure wireguard
|
||||
include: wireguard.yml
|
||||
|
26
ansible/roles/gateway/tasks/nginx.yml
Normal file
26
ansible/roles/gateway/tasks/nginx.yml
Normal file
@ -0,0 +1,26 @@
|
||||
- name: Install nginx
|
||||
package:
|
||||
name: nginx
|
||||
become: true
|
||||
|
||||
- name: Nginx config
|
||||
template:
|
||||
src: files/nginx.conf
|
||||
dest: /etc/nginx/nginx.conf
|
||||
validate: nginx -t -c %s
|
||||
mode: "0644"
|
||||
become: true
|
||||
register: nginx_config
|
||||
|
||||
- name: Enable Nginx
|
||||
service:
|
||||
name: nginx
|
||||
enabled: true
|
||||
become: true
|
||||
|
||||
- name: Restart Nginx
|
||||
service:
|
||||
name: nginx
|
||||
state: restarted
|
||||
become: true
|
||||
when: nginx_config.changed
|
Reference in New Issue
Block a user