@installdoc/ansible-gas-station
Version:
An Ansible playbook that provisions your network with software from GitHub Awesome lists, developed with disaster recovery in mind ⛽🔥🤤
53 lines (45 loc) • 1.52 kB
YAML
- name: Check if NGINX configs are from git # TODO: Add better way of detecting.. like check the git remote and if it matches
stat:
path: /etc/nginx/README.md
register: custom_nginx_readme
- name: Remove default NGINX etc folder
file:
path: /etc/nginx
state: absent
when: not custom_nginx_readme.stat.exists
- name: Clone default NGINX source
git:
dest: /etc/nginx
force: true
repo: "{{ nginx_config_repository }}"
update: true
version: "{{ nginx_config_repository_version }}"
- name: Remove NGINX Amplify stub_status.conf if nginx_amplify_api_key is not provided
file:
path: /etc/nginx/conf.d/stub_status.conf
state: absent
when: (nginx_amplify_api_key is undefined) or (not enable_nginx_amplify)
- name: Remove Brotli configuration files if Brotli not enabled
file:
path: "{{ item }}"
state: absent
loop:
- /etc/nginx/conf.d/brotli.conf
- /etc/nginx/modules-enabled/50-mod-brotli.conf
when: not enable_nginx_brotli
- name: Remove ModSecurity configuration files if ModSecurity is not enabled
file:
path: /etc/nginx/modules-enabled/50-mod-security.conf
state: absent
when: not enable_nginx_modsecurity_waf
- name: Clear sites-available if configured to do so
file:
path: "{{ sites_available_path + '*' }}"
state: absent
when: nginx_clear_sites_available
- name: Clear sites-enabled if configured to do so
file:
path: "{{ sites_enabled_path + '*' }}"
state: absent
when: nginx_clear_sites_enabled