alexandre.pires
272ed647cf
- Updated host_vars for dev-02 to include login history settings and modified code server authentication. - Adjusted opencode server configurations and reduced resource allocation. - Introduced a new playbook for configuring nginx reverse proxy with TLS and OAuth2. - Enhanced linux_dev_station role defaults and tasks, including package updates and service configurations. - Removed unnecessary credential assertions in linux_dev_station tasks. - Created nginx_proxy role with tasks for certbot, nginx installation, and oauth2-proxy setup. - Added templates for nginx and oauth2-proxy configurations. - Updated terraform configuration to reflect new DNS records for ide and agent services. - Documented changes and configurations in linux_dev_station.md for clarity and future reference.
40 lines
1.3 KiB
YAML
40 lines
1.3 KiB
YAML
---
|
|
- name: Validate nginx_proxy_sites is defined
|
|
ansible.builtin.assert:
|
|
that:
|
|
- nginx_proxy_sites is defined
|
|
- nginx_proxy_sites | length > 0
|
|
fail_msg: "nginx_proxy_sites must be defined with at least one site"
|
|
|
|
- name: Validate each site has required fields
|
|
ansible.builtin.assert:
|
|
that:
|
|
- item.server_name is defined
|
|
- item.upstream is defined
|
|
- item.upstream.host is defined
|
|
- item.upstream.port is defined
|
|
fail_msg: "Each site in nginx_proxy_sites must have server_name, upstream.host, and upstream.port"
|
|
loop: "{{ nginx_proxy_sites }}"
|
|
|
|
- name: Calculate certbot domains from sites
|
|
ansible.builtin.set_fact:
|
|
__nginx_proxy_certbot_domains: "{{ nginx_proxy_sites | map(attribute='server_name') | list }}"
|
|
when: nginx_proxy_certbot_domains is not defined
|
|
|
|
- name: Use explicit certbot domains when defined
|
|
ansible.builtin.set_fact:
|
|
__nginx_proxy_certbot_domains: "{{ nginx_proxy_certbot_domains }}"
|
|
when: nginx_proxy_certbot_domains is defined
|
|
|
|
- name: Install certbot
|
|
ansible.builtin.include_tasks: certbot.yml
|
|
when: nginx_proxy_certbot_enabled | bool
|
|
|
|
- name: Install nginx
|
|
ansible.builtin.include_tasks: nginx.yml
|
|
when: nginx_proxy_nginx_enabled | bool
|
|
|
|
- name: Install oauth2-proxy
|
|
ansible.builtin.include_tasks: oauth2_proxy.yml
|
|
when: nginx_proxy_oauth2_proxy_enabled | bool
|