60 lines
2.1 KiB
Plaintext
60 lines
2.1 KiB
Plaintext
|
#jinja2: lstrip_blocks: True
|
||
|
|
{{ ansible_managed | comment }}
|
||
|
|
|
||
|
|
{% if item.upstream is defined and item.upstream %}
|
||
|
|
upstream {{ item.upstream.name }} {
|
||
|
|
{% for upserver in item.upstream.servers %}
|
||
|
|
server {{ upserver }};
|
||
|
|
{% endfor %}
|
||
|
|
}
|
||
|
|
|
||
|
|
{% endif %}
|
||
|
|
{% for server in item.servers %}
|
||
|
|
server {
|
||
|
|
listen {{ server.port }} {{ 'ssl' if server.tls is defined and server.tls else '' }};
|
||
|
|
server_name {{ server.server_name }};
|
||
|
|
|
||
|
|
{% if server.tls is defined and server.tls %}
|
||
|
|
ssl_certificate {{ server.tls.cert }};
|
||
|
|
ssl_certificate_key {{ server.tls.key }};
|
||
|
|
{% if server.tls.dhparam is defined %}
|
||
|
|
ssl_dhparam {{ item.value.ssl.dhparam }};
|
||
|
|
{% endif %}
|
||
|
|
{% endif %}
|
||
|
|
|
||
|
|
{% if server.tls_redirect | default(False) %}
|
||
|
|
return 301 https://{% if server.tls_redirect_url is defined %}{{ server.tls_redirect_url }}{% else %}$server_name{% endif %}$request_uri;
|
||
|
|
{% else %}
|
||
|
|
{% if server.client_max_body_size is defined and server.client_max_body_size %}
|
||
|
|
client_max_body_size {{ server.client_max_body_size }};
|
||
|
|
{% endif %}
|
||
|
|
{% for location in server.locations %}
|
||
|
|
location {{ location.match }}
|
||
|
|
{% if location.root is defined and location.root %}
|
||
|
|
root {{ location.root }};
|
||
|
|
{% endif %}
|
||
|
|
{% if location.index is defined and location.index %}
|
||
|
|
index {{ location.index }};
|
||
|
|
{% endif %}
|
||
|
|
{% if location.proxy_pass is defined and location.proxy_pass %}
|
||
|
|
|
||
|
|
proxy_pass {{ location.proxy_pass }}
|
||
|
|
{% if location.proxy_http_version is defined and location.proxy_http_version %}
|
||
|
|
proxy_http_version {{ location.proxy_http_version }};
|
||
|
|
{% endif %}
|
||
|
|
{% for pheader in location.proxy_headers | default([]) %}
|
||
|
|
proxy_set_header {{ pheader }};
|
||
|
|
{% endfor %}
|
||
|
|
{% endif %}
|
||
|
|
}
|
||
|
|
|
||
|
|
{% endfor %}
|
||
|
|
# redirect server error pages to the static page /50x.html
|
||
|
|
error_page 500 502 503 504 /50x.html;
|
||
|
|
location = /50x.html {
|
||
|
|
root {{ item.error_page | default("/usr/share/nginx/html") }};
|
||
|
|
}
|
||
|
|
{% endif %}
|
||
|
|
}
|
||
|
|
{% endfor %}
|