create role nginx

README.md

@@ -82,6 +82,10 @@
   - install
   - config
 
+- [ ] dns role
+    -slave/primary
+
+
 - [ ] mariadb role
   - install
   - config

group_vars/server

@@ -43,4 +43,40 @@ fail2ban_sendmail: "{{ user.mail }}"
 
 Gandi_API_KEYS: "{{ vault_gandi_API_Keys }}"
 Gandi_Domain: "{{ domain.name }}"
-Gandi_Record: www
+Gandi_Record: www
+
+
+nginx_vhosts:
+    - listen: "80"
+      server_name: "localhost"
+      root: "/usr/share/nginx/html/"
+      error_page: "404              /404/404.html"
+      filename: "default.conf"
+      state: "present"
+      template: "{{ nginx_vhost_template }}"
+      extra_parameters: |
+        error_page   500 502 503 504  /50x.html;
+        location = /50x.html {
+            root   /usr/share/nginx/html;
+        }
+
+        location =/ {
+             rewrite ^ /starter;
+        }
+        location / {
+           index index.php index.html index.htm ;
+           default_type text/html;
+
+        }
+        location ~ \.php$ {
+           # try_files $uri =404;
+            fastcgi_split_path_info ^(.+\.php)(/.+)$;
+            fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_read_timeout 800;
+            fastcgi_index index.php;
+            include fastcgi_params;
+        }
+
+
+nginx_realIP_Proxy: 192.168.1.10/24

server.yml

@@ -15,6 +15,7 @@
   - gandi-dyn-dns
   - fail2ban
   - dns
+  - {role: nginx, become: yes }
   - tt-rss
   - gitea
   - user_config