ansible/roles/web/tasks/main.yml

---

- name: Install dependencies
  apt:
    name:
    - php-fpm
    - php-ldap
    - php-sqlite3
    - php-xml
    - python3-passlib

- name: Create vhost directories
  file: path=/var/www/{{ item }} state=directory owner=www-data group=www-data
  with_items:
  - autoconfig
  - autoconfig/mail
  - ccc-r
  - makerspace-regensburg
  - kitchen

- name: Ensure (BK) certificates are available
  command: openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/nginx/ssl/www.binary-kitchen.de.key -out /etc/nginx/ssl/www.binary-kitchen.de.crt -days 730 -subj "/CN=www.binary-kitchen.de" creates=/etc/nginx/ssl/www.binary-kitchen.de.crt
  notify: Restart nginx

- name: Ensure (BK autodiscover) certificates are available
  command: openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/nginx/ssl/autoconfig.binary-kitchen.de.key -out /etc/nginx/ssl/autoconfig.binary-kitchen.de.crt -days 730 -subj "/CN=autoconfig.binary-kitchen.de" creates=/etc/nginx/ssl/autoconfig.binary-kitchen.de.crt
  notify: Restart nginx

- name: Ensure (CCC-R) certificates are available
  command: openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/nginx/ssl/www.ccc-r.de.key -out /etc/nginx/ssl/www.ccc-r.de.crt -days 730 -subj "/CN=www.ccc-r.de" creates=/etc/nginx/ssl/www.ccc-r.de.crt
  notify: Restart nginx

- name: Ensure (MS-R) certificates are available
  command: openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/nginx/ssl/www.makerspace-regensburg.de.key -out /etc/nginx/ssl/www.makerspace-regensburg.de.crt -days 730 -subj "/CN=www.makerspace-regensburg.de" creates=/etc/nginx/ssl/www.makerspace-regensburg.de.crt
  notify: Restart nginx

- name: Place Thunderbird autoconfig file
  template: src=auto_mail.xml.j2 dest=/var/www/autoconfig/mail/config-v1.1.xml

- name: Configure php-fpm
  copy: src={{ item }} dest=/etc/php/8.2/fpm/pool.d/
  notify: Restart php8.2-fpm
  with_fileglob: "php/8.2/fpm/pool.d/*.conf"

- name: Configure htaccess for fpm status
  htpasswd:
    path: /etc/nginx/fpm_status.htaccess
    name: "{{ fpm_status_user}}"
    password: "{{ fpm_status_pass }}"
    owner: root
    group: www-data
    mode: 0640

- name: Configure certificate manager
  copy: src=certs dest=/etc/acertmgr/www.binary-kitchen.de.conf
  notify: Run acertmgr

- name: Configure vhosts
  copy: src=vhost dest=/etc/nginx/sites-available/www
  notify: Restart nginx

- name: Enable vhosts
  file: src=/etc/nginx/sites-available/www dest=/etc/nginx/sites-enabled/www state=link
  notify: Restart nginx

- name: Start php8.2-fpm
  service: name=php8.2-fpm state=started enabled=yes