Misc

create-nginx.yml

@@ -19,11 +19,10 @@
     nginx_user: www-data
     password: $6$9PumPdxR$kwIOv22qD8vHWFvBTrYxXsIjCvfVuM88lhCGosnf6DgtuKjkxU9m34nvkz0X/i/ooUgV1o3poIj7RijltWj5E.
     public_key: "{{ lookup('env','HOME') }}/.ssh/id_rsa.pub"
-    sites_enabled:
-      - testfile
   user: root
   roles:
    - ssh
+   - repositories
    - common
    - user
    - nginx

files/sites-enabled/testfile

@@ -1,8 +1,13 @@
 server {
 	listen       80;
-	server_name  localhost;
+	listen       443 ssl;
+	server_name  $domain;
+	location /.well-known {
+		root /var/www/ssl-proof/;
+	}
+
 	location /back/ {
 		add_header Content-Type text/json;
-		proxy_pass http://127.0.0.1:8000/;
+		proxy_pass http://$IP:$PORT/;
 	}
 }

roles/common/tasks/main.yml

@@ -1,9 +1,12 @@
-- name: install unattended upgrades
-  apt: name=unattended-upgrades state=present
+- name: Install from backports
+  apt: name={{item}} state=present default_release=jessie-backports
+  with_items:
+    - certbot
 
 - name: Install common packages
   apt: name={{item}} state=present
   with_items:
+    - unattended-upgrades
     - htop
     - sudo
     - ntp

roles/nginx/tasks/main.yml

@@ -13,7 +13,9 @@
     state: present
   notify: restart nginx
 
+- name: create ssl-proof dir
+  file: path=/var/www/ssl-proof/ state=directory owner=www-data group=www-data mode=0775
+
 - name: copy sites-enabled
-  copy: src="files/sites-enabled/{{ item }}" dest="/etc/nginx/sites-enabled/{{ item }}"
-  with_items: "{{ sites_enabled }}"
+  copy: src="files/sites-enabled/" dest="/etc/nginx/sites-enabled/"
   notify: reload nginx