1- hosts: surveytool 2 become: yes 3 vars_files: 4 - vars/main.yml 5 - local-vars/local.yml 6 roles: 7 - { role: geerlingguy.nginx } 8 tasks: 9 - name: Setup stapler.conf 10 copy: 11 src: templates/nginx-stapler.conf 12 dest: /etc/nginx/conf.d/stapler.conf 13 owner: root 14 group: root 15 mode: '0644' 16 notify: 'Restart Nginx' 17 - name: Setup reverse proxy 18 blockinfile: 19 path: /etc/nginx/sites-enabled/default 20 block: | 21 # proxy /cldr-apps/ to openliberty, with generous timeouts 22 proxy_connect_timeout 60s; 23 proxy_send_timeout 500s; 24 proxy_read_timeout 500s; 25 location /cldr-apps/ { 26 rewrite ^/(.+)\._[\da-f]+_\.(js|css)$ /$1.$2 break; 27 allow all; 28 proxy_pass http://localhost:9080/cldr-apps/; 29 proxy_set_header Host $host; 30 proxy_set_header X-Real-IP $remote_addr; 31 proxy_set_header X-Forwarded-For $remote_addr; 32 proxy_set_header X-Forwarded-Proto $scheme; 33 } 34 location /openapi/ { 35 allow all; 36 proxy_pass http://localhost:9080/openapi/; 37 proxy_set_header Host $host; 38 proxy_set_header X-Real-IP $remote_addr; 39 proxy_set_header X-Forwarded-For $remote_addr; 40 proxy_set_header X-Forwarded-Proto $scheme; 41 } 42 marker: '# {mark} ANSIBLE MANAGED BLOCK' 43 insertafter: '^[\s]*server_name' # the LAST uncommented server block 44 notify: 'Restart Nginx' 45 - name: Setup index.html 46 copy: 47 src: templates/index.html 48 dest: /var/www/html 49 owner: root 50 group: root 51 mode: '0644' 52 handlers: 53 - name: Restart Nginx 54 service: 55 name: nginx 56 state: restarted 57