xoxys.nginx/tasks/config.yml

---
- name: Enable nginx service
  service:
    name: nginx
    enabled: yes
    state: started

- name: Prepare vhost directories
  file:
    path: '{{ item }}'
    state: directory
    owner: nginx
    group: nginx
    mode: 0750
  with_items:
    - /var/www/vhosts
    - /var/www/vhosts/default

- name: Prepare nginx directories
  file:
    path: '{{ item }}'
    state: directory
    owner: root
    group: root
    mode: 0640
  with_items:
    - /etc/nginx/sites-available
    - /etc/nginx/sites-enabled

- name: Add default page
  template:
    src: 'var/www/vhosts/default/index.html.j2'
    dest: '/var/www/vhosts/default/index.html'
    owner: nginx
    group: nginx
    mode: 0750

- name: Update nginx.conf
  template:
    src: 'etc/nginx/nginx.conf.j2'
    dest: '/etc/nginx/nginx.conf'
    owner: root
    group: root
    mode: 0640
  notify:
    - nginx_restart

- name: Update conf.d files
  template:
    src: 'etc/nginx/conf.d/{{ item }}.j2'
    dest: '/etc/nginx/conf.d/{{ item }}'
    owner: root
    group: root
    mode: 0640
  with_items:
    - header.conf
  notify:
    - nginx_restart

- name: Remove default.conf from conf.d
  file:
    path: /etc/conf.d/default.conf
    state: absent

- name: Add default page config
  template:
    src: 'etc/nginx/sites-available/default.j2'
    dest: '/etc/nginx/sites-available/default'
    owner: root
    group: root
    mode: 0640

- name: Enable default page
  file:
    src: /etc/nginx/sites-available/default
    dest: /etc/nginx/sites-enabled/default
    owner: root
    group: root
    state: link
  notify:
    - nginx_restart

- name: Open ports in iptables
  iptables_raw:
    name: allow_nginx_ports
    state: present
    rules: '-A INPUT -p tcp -m multiport --dports {{ nginx_open_ports|join(",") }} -j ACCEPT'
  tags: iptables