From bdf96b6eeb56d0d35b7742daefeed63a8c24748e Mon Sep 17 00:00:00 2001
From: Felix Stupp <felix.stupp@outlook.com>
Date: Wed, 29 May 2019 00:34:43 +0200
Subject: [PATCH] roles/nginx/static added

---
 roles/nginx/static/defaults/main.yml     |  4 ++++
 roles/nginx/static/meta/main.yml         |  7 +++++++
 roles/nginx/static/tasks/main.yml        | 10 ++++++++++
 roles/nginx/static/templates/static.conf | 18 ++++++++++++++++++
 4 files changed, 39 insertions(+)
 create mode 100644 roles/nginx/static/defaults/main.yml
 create mode 100644 roles/nginx/static/meta/main.yml
 create mode 100644 roles/nginx/static/tasks/main.yml
 create mode 100644 roles/nginx/static/templates/static.conf

diff --git a/roles/nginx/static/defaults/main.yml b/roles/nginx/static/defaults/main.yml
new file mode 100644
index 0000000..0b68a75
--- /dev/null
+++ b/roles/nginx/static/defaults/main.yml
@@ -0,0 +1,4 @@
+---
+
+# domain: example.com
+root_directory: "{{ global_webservers_directory }}/{{ domain }}"
diff --git a/roles/nginx/static/meta/main.yml b/roles/nginx/static/meta/main.yml
new file mode 100644
index 0000000..4e8a0c7
--- /dev/null
+++ b/roles/nginx/static/meta/main.yml
@@ -0,0 +1,7 @@
+---
+
+allow_duplicates: yes
+
+dependencies:
+  - role: acme/certificate
+  - role: nginx/application
diff --git a/roles/nginx/static/tasks/main.yml b/roles/nginx/static/tasks/main.yml
new file mode 100644
index 0000000..b14e6cd
--- /dev/null
+++ b/roles/nginx/static/tasks/main.yml
@@ -0,0 +1,10 @@
+---
+
+- name: Configure static for {{ domain }}
+  template:
+    src: static.conf
+    dest: "{{ nginx_sites_directory }}/{{ domain }}"
+    owner: root
+    group: root
+    mode: "u=rw,g=r,o=r"
+  notify: reload nginx
diff --git a/roles/nginx/static/templates/static.conf b/roles/nginx/static/templates/static.conf
new file mode 100644
index 0000000..491a48c
--- /dev/null
+++ b/roles/nginx/static/templates/static.conf
@@ -0,0 +1,18 @@
+server {
+  listen 443 ssl http2;
+  listen [::]:443 ssl http2;
+  server_name {{ domain }};
+
+  ssl on;
+  ssl_certificate {{ acme_certificate_location }};
+  ssl_certificate_key {{ acme_key_location }};
+
+  root {{ root_directory }};
+
+  include {{ nginx_snippets_directory }}/https;
+  include {{ nginx_snippets_directory }}/root;
+
+  location / {
+      try_files $uri $uri/ =404;
+  }
+}