diff --git a/roles/pve-nginx-redirector/handlers/main.yml b/roles/pve-nginx-redirector/handlers/main.yml new file mode 100644 index 0000000..44975c4 --- /dev/null +++ b/roles/pve-nginx-redirector/handlers/main.yml @@ -0,0 +1,4 @@ +--- + +- name: Restart nginx + service: name=nginx state=restarted diff --git a/roles/pve-nginx-redirector/tasks/main.yml b/roles/pve-nginx-redirector/tasks/main.yml new file mode 100644 index 0000000..2a1143d --- /dev/null +++ b/roles/pve-nginx-redirector/tasks/main.yml @@ -0,0 +1,10 @@ +--- + +- name: Check if nginx is installed + stat: path=/etc/nginx + register: nginx + +- name: Configuring nginx pve redirector 80 -> 443 -> 8006 + template: src=redirect.j2 dest=/etc/nginx/sites-enabled/redirect mode=0644 + notify: Restart nginx + when: nginx.stat.exists == True diff --git a/roles/pve-nginx-redirector/templates/redirect.j2 b/roles/pve-nginx-redirector/templates/redirect.j2 new file mode 100644 index 0000000..249729c --- /dev/null +++ b/roles/pve-nginx-redirector/templates/redirect.j2 @@ -0,0 +1,19 @@ +server { + listen {{ ansible_default_ipv4.address | default("0.0.0.0") }}:80; + + location / { + return 301 https://$server_addr; + } + +} + +server { + listen {{ ansible_default_ipv4.address | default("0.0.0.0") }}:443 ssl; + + location / { + return 301 https://$server_addr:8006; + } + + ssl_certificate /etc/pve/local/pve-ssl.pem; + ssl_certificate_key /etc/pve/local/pve-ssl.key; +}