<feed xmlns='http://www.w3.org/2005/Atom'>
<title>labitat-ansible/roles/nginx/templates, branch new_prefixes</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<link rel='alternate' type='text/html' href='https://git.2e8.dk/labitat/labitat-ansible/'/>
<entry>
<title>nginx: add common role for nginx</title>
<updated>2023-01-26T23:32:09+00:00</updated>
<author>
<name>Joshua Hull</name>
<email>josh@fireflop.com</email>
</author>
<published>2023-01-15T09:49:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.2e8.dk/labitat/labitat-ansible/commit/?id=6bbdee9dc9333e94d13e8653ee3bb5626aa754b5'/>
<id>6bbdee9dc9333e94d13e8653ee3bb5626aa754b5</id>
<content type='text'>
esmil:
- disable access log and log errors to syslog (journal really)
  use journalctl -u nginx to see the errors
- hoist some configuration values into ansible variables
- add tags and use a handler to reload nginx on configuration changes
- make nginx do its DNS queries against our local resolved
  this enables nginx to use DNSSEC and DoT
- don't start nginx before the network is up. if it can't do
  dns lookups ssl_stapling will be ignored
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
esmil:
- disable access log and log errors to syslog (journal really)
  use journalctl -u nginx to see the errors
- hoist some configuration values into ansible variables
- add tags and use a handler to reload nginx on configuration changes
- make nginx do its DNS queries against our local resolved
  this enables nginx to use DNSSEC and DoT
- don't start nginx before the network is up. if it can't do
  dns lookups ssl_stapling will be ignored
</pre>
</div>
</content>
</entry>
</feed>
