From 6bbdee9dc9333e94d13e8653ee3bb5626aa754b5 Mon Sep 17 00:00:00 2001
From: Joshua Hull <josh@fireflop.com>
Date: Sun, 15 Jan 2023 10:49:21 +0100
Subject: nginx: add common role for nginx

esmil:
- disable access log and log errors to syslog (journal really)
  use journalctl -u nginx to see the errors
- hoist some configuration values into ansible variables
- add tags and use a handler to reload nginx on configuration changes
- make nginx do its DNS queries against our local resolved
  this enables nginx to use DNSSEC and DoT
- don't start nginx before the network is up. if it can't do
  dns lookups ssl_stapling will be ignored
---
 roles/nginx/handlers/main.yml | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 roles/nginx/handlers/main.yml

(limited to 'roles/nginx/handlers')

diff --git a/roles/nginx/handlers/main.yml b/roles/nginx/handlers/main.yml
new file mode 100644
index 0000000..f335839
--- /dev/null
+++ b/roles/nginx/handlers/main.yml
@@ -0,0 +1,7 @@
+---
+- name: reload nginx
+  systemd:
+    name: nginx.service
+    state: reloaded
+
+# vim: set ts=2 sw=2 et:
-- 
cgit v1.2.1