ctucx.git: ansible-configs

My personal ansible roles and playbooks [deprecated in favor of nixos]

1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
39 
40 
41 
42 
43 
44 
45 
46 
47 
48 
49 
50 
51 
52 
53 
54 
55 
56 
57 
58 
59 
60 
61 
62 
63 
64 
65 
66 
#
# !!! This file is managed by Ansible !!!
#

{% if  services.influxdb.nginx.sslOnly is not defined or services.influxdb.nginx.sslOnly is false %}
server {
	listen 80 ;
	listen [::]:80;
	
	server_name {{ services.influxdb.nginx.domain }};

	location / {
		{% if services.influxdb.nginx.enableBasicAuth is true %}
		auth_basic 'Needs Autherization';
		auth_basic_user_file /etc/nginx/passwd/influxdb;
		{% endif %}

		proxy_pass http://127.0.0.1:8086/;
#		include /etc/nginx/proxy.conf;

		proxy_redirect default;
		proxy_http_version 1.1;
		proxy_set_header Connection '';

		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_max_temp_file_size 0;
		proxy_connect_timeout   240;
		proxy_send_timeout     240;
		proxy_read_timeout     240;
		expires -1;
		add_header Cache-Control private;
	}
}

{% endif %}
{% if services.influxdb.nginx.ssl.enable is true %}
server {
	listen 443 ssl;
	listen [::]:443 ssl;

	ssl_certificate "{{ services.influxdb.nginx.ssl.cert }}";
	ssl_certificate_key "{{ services.influxdb.nginx.ssl.privkey }}";
	include /etc/nginx/ssl.conf;
	
	server_name {{ services.influxdb.nginx.domain }};

	location / {
		proxy_pass http://127.0.0.1:8086/;
#		include /etc/nginx/proxy.conf;
		proxy_redirect default;
		proxy_http_version 1.1;
		proxy_set_header Connection '';

		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_max_temp_file_size 0;
		proxy_connect_timeout   240;
		proxy_send_timeout     240;
		proxy_read_timeout     240;
		expires -1;
		add_header Cache-Control private;	}
}
{% endif %}