ctucx.git: ansible-configs

roles/nginx: add support for nginx-mod-http-xslt-filter

diff --git a/roles/nginx/tasks/install.yml b/roles/nginx/tasks/install.yml
@@ -2,7 +2,8 @@
 
 - name: "[Alpine] Install package: nginx" 
   apk:
-    name: nginx
+    name:
+      - nginx
     state: present
   when:
     - ansible_distribution == "Alpine" 

@@ -13,3 +14,20 @@
     state: present
   when:
     - ansible_distribution == "Archlinux" 
+
+- name: "[Alpine] Install package: nginx-mod-http-xslt-filter" 
+  apk:
+    name: nginx-mod-http-xslt-filter
+    state: present
+  when:
+    - ansible_distribution == "Alpine"
+    - services.nginx.enableXSLTFilter is true
+
+- name: "[Archlinux] Install package: nginx-mod-http-xslt-filter" 
+  pacman:
+    name: nginx-mod-http-xslt-filter
+    state: present
+  when:
+    - ansible_distribution == "Archlinux"
+    - services.nginx.enableXSLTFilter is true
+

diff --git a/roles/nginx/templates/nginx.conf.j2 b/roles/nginx/templates/nginx.conf.j2
@@ -10,8 +10,9 @@ pcre_jit on;
 
 error_log /var/log/nginx/error.log warn;
 
-include /etc/nginx/modules/*.conf;
-
+{% if services.nginx.enableXSLTFilter is true %}
+load_module "/usr/lib/nginx/modules/ngx_http_xslt_filter_module.so";
+{% endif %}
 
 events {
 	worker_connections 1024;

diff --git a/roles/nginx/templates/vhost.conf.j2 b/roles/nginx/templates/vhost.conf.j2
@@ -75,7 +75,7 @@ server {
 	listen 443 ssl default_server;
 	listen [::]:443 ssl default_server;
 	{% else %}
-	listen 443 ssl ;
+	listen 443 ssl;
 	listen [::]:443 ssl;
 	{% endif %}