ctucx.git: ansible-configs

My personal ansible roles and playbooks [deprecated in favor of nixos]

1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
39 
40 
41 
42 
43 
44 
45 
46 
47 
48 
49 
50 
51 
52 
53 
54 
55 
56 
57 
58 
59 
60 
61 
62 
63 
64 
#
# !!! This file is managed by Ansible !!!
#

user {{ services.nginx.user | default('http') }};

worker_processes auto;

pcre_jit on;

error_log /var/log/nginx/error.log warn;

{% if services.nginx.enableXSLTFilter is true %}
load_module "/usr/lib/nginx/modules/ngx_http_xslt_filter_module.so";
{% endif %}

events {
	worker_connections 1024;
}

http {
	include /etc/nginx/mime.types;
	default_type application/octet-stream;

	server_tokens off;

	server_names_hash_bucket_size 64;

	types_hash_max_size 1024;
	types_hash_bucket_size 128;

	client_max_body_size 1G;

	keepalive_timeout 65;

	sendfile on;

	tcp_nodelay on;

	ssl_prefer_server_ciphers on;

	ssl_session_cache shared:SSL:2m;

	gzip on;

	gzip_vary on;

	#gzip_static on;


	# Specifies the main log format.
	log_format main '$remote_addr - $remote_user [$time_local] "$request" '
			'$status $body_bytes_sent "$http_referer" '
			'"$http_user_agent" "$http_x_forwarded_for"';

	{% if services.nginx.extraConfig is defined %}
	{{ services.nginx.extraConfig }}
	{% endif %}

	access_log /var/log/nginx/access.log main;

	include /etc/nginx/conf.d/*.conf;
	include /etc/nginx/vhosts/*.conf;
}