116 Commits (master)

Author SHA1 Message Date
Felix Stupp 1855deb351
nginx/server: Documentated required variables 5 years ago
Felix Stupp 8b75c49917
nginx/proxy: Made dependent on nginx/server and allowed additional directives 5 years ago
Felix Stupp fb0c1f0901
Changed "ansible_fqdn" to "inventory_hostname"
Due to some hosts misconfigure fqdn themselves
5 years ago
Felix Stupp 9c63c8516b
nginx/application: Disabled SSL Session Tickets 5 years ago
Felix Stupp 409ea327f0
nginx/application: Increased ssl_cache timeout 5 years ago
Felix Stupp b9f060a0ce
nginx/php-fpm: Added installation of apcu cache 5 years ago
Felix Stupp 7df2668208
nginx/php-fpm: Increased size of opcache memory consumption to 256 5 years ago
Felix Stupp 206c940d16
nginx/php-pool: Tuned up childs at php 5 years ago
Felix Stupp fc897ea3b9
nginx/application: Fixed configuring resolver for OCSP Stapling 5 years ago
Felix Stupp 03884cbf3e
nginx/server: Allowed duplicates of role 5 years ago
Felix Stupp edf455bf66
nginx/application: Allowed dot files uploads by Nextcloud 5 years ago
Felix Stupp c21ee11c66
nginx/application: Blocked all hidden directories except well-known 5 years ago
Felix Stupp 502606b1e3
nginx/application: Set type to text for test file 5 years ago
Felix Stupp 57e422b478
nginx/application: Disabled access_log on acme requests 5 years ago
Felix Stupp 8e28bcb0ec
Added role nginx/php 5 years ago
Felix Stupp 72e7857570
nginx/php-pool: Locked reading of php-pool configurations 5 years ago
Felix Stupp 3414e3fd85
nginx/php-pool: Changed group of src directory to nginx user 5 years ago
Felix Stupp 4f1fdf72c7
nginx/php-pool: Added support for env variables 5 years ago
Felix Stupp 133d82e0bb
nginx/proxy: Added doc for var upstream_name 5 years ago
Felix Stupp bcfd4cb010
Fixed missing mode setting for others
To disallow access from others than user and group
5 years ago
Felix Stupp a3fde6aa3c
acme: Moved certificate handling to custom system user
Avoided using root for acme.sh
Modified also role nginx/application
5 years ago
Felix Stupp 002ecc28b0
nginx/php-pool: Removed not needed system user configuration 5 years ago
Felix Stupp 5486d06226
nginx/php-fpm: Fixed removing default php-fpm pool 5 years ago
Felix Stupp 964099cfdb
nginx/php-fpm: Added configuration for php opcache 5 years ago
Felix Stupp 852dbdb143
php-pool: Added domain to required variables (doc-only) 5 years ago
Felix Stupp 029fba1983
nginx/php-pool: Added support for custom memory_limit 5 years ago
Felix Stupp a0000e3c7f
nginx/php*: Fixed handler names for controlling php-fpm service 5 years ago
Felix Stupp ce90f3dadf
nginx/php-fpm: Fixed getting php-fpm for newer versions of Debian 5 years ago
Felix Stupp 9ba13c5d73
nginx/application: Enabled OCSP Stapling 5 years ago
Felix Stupp 22f14189c2
nginx/application: Enabled TLSv1.3 and reworked ciphers 5 years ago
Felix Stupp ce1f2fb132
nginx/application: Increased time for HSTS 5 years ago
Felix Stupp 5bed7d067a
nginx/application: Added localhost as resolver for nginx 5 years ago
Felix Stupp d9eb74649f
nginx/application: Fixed missing notify for templates 5 years ago
Felix Stupp 0bec0a9630
Added role nginx/server 5 years ago
Felix Stupp 3f19422c0c
Added role nginx/php-pool 5 years ago
Felix Stupp 692b9bf74b
Added role nginx/php-fpm
For php-fpm setup
5 years ago
Felix Stupp f85d1a4477
roles/nginx/forward: nginx configuration "redirect" -> "return" 6 years ago
Felix Stupp d938fdfb39
roles/nginx/forward: Fixed name of configuration template 6 years ago
Felix Stupp 7d8be15582
roles/nginx/proxy: Reworked proxy to adapt to upstreams 6 years ago
Felix Stupp bdf96b6eeb
roles/nginx/static added 6 years ago
Felix Stupp 309d23ba8a
roles/nginx: Reworked upstreams 6 years ago
Felix Stupp 6c310a8f3d
roles/nginx/application: Set allow_duplicates to false 6 years ago
Felix Stupp 6b376cacfa
roles/nginx/application: Added snippets acme and root 6 years ago
Felix Stupp da676ebc32
roles/nginx/application: Included upstreams directory 6 years ago
Felix Stupp 7e56f8ada5
roles/nginx/application: Fixed global forwarding to https 6 years ago
Felix Stupp 097ff3d743
roles/nginx/application: Fixed nginx variable configuration 6 years ago
Felix Stupp 5676165f1c
roles/nginx/application: Fixed configuration for global logs 6 years ago
Felix Stupp d80261fe53
roles/nginx/application: Added validation for nginx.conf 6 years ago
Felix Stupp 007c7ed2a4
roles/nginx/application: Fixed task names containing item keyword 6 years ago
Felix Stupp fad2b9bc7c
Removed forwarding of domain variable causing loop of resolving 6 years ago
Felix Stupp 226bc9c873
Reconfigured nginx / acme validation handling 6 years ago
Felix Stupp 308c6a95d4
Configured allow_duplicates for several roles 6 years ago
Felix Stupp f502ba4574
Added role nginx/proxy
Also added needed dependencies
6 years ago
Felix Stupp 7122bcf9e3
nginx/application: Enabled acme verification for all over http 6 years ago
Felix Stupp facee1a61d
nginx/application: Extracted acme snippets from global 6 years ago
Felix Stupp d08159eb24
nginx/application: Removed duplicated ssl configuration 6 years ago
Felix Stupp b49a832759
nginx/application: Added rules for firewall 6 years ago
Felix Stupp 2186137327
nginx/application: Used vars in nginx.conf 6 years ago
Felix Stupp 7a84ae4fdc
nginx/application: Fixed uploading and including snippets 6 years ago
Felix Stupp ec59a31dea
roles/nginx/forward: Changed var name "destination" to "dest" 6 years ago
Felix Stupp 6a6e2f6602
Moved dependency of certificate validation directory to nginx role 6 years ago
Felix Stupp 01fafa5ca1
nginx: Reworked global ssl and https configuration 6 years ago
Felix Stupp c2bd392675
Added role nginx/forward 6 years ago
Felix Stupp 08ebc2f5cb
Added role nginx/application 6 years ago
Felix Stupp b380249c0c
Added role nginx/all_mail_proxy 6 years ago
Felix Stupp 88afbf7106
Added role nginx/mail_proxy 6 years ago