From 6bbdee9dc9333e94d13e8653ee3bb5626aa754b5 Mon Sep 17 00:00:00 2001 From: Joshua Hull Date: Sun, 15 Jan 2023 10:49:21 +0100 Subject: nginx: add common role for nginx esmil: - disable access log and log errors to syslog (journal really) use journalctl -u nginx to see the errors - hoist some configuration values into ansible variables - add tags and use a handler to reload nginx on configuration changes - make nginx do its DNS queries against our local resolved this enables nginx to use DNSSEC and DoT - don't start nginx before the network is up. if it can't do dns lookups ssl_stapling will be ignored --- roles/sky/files/wait-online.conf | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 roles/sky/files/wait-online.conf (limited to 'roles/sky/files/wait-online.conf') diff --git a/roles/sky/files/wait-online.conf b/roles/sky/files/wait-online.conf new file mode 100644 index 0000000..0a38143 --- /dev/null +++ b/roles/sky/files/wait-online.conf @@ -0,0 +1,3 @@ +[Unit] +Wants=network-online.target +After=network-online.target -- cgit v1.2.1