• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1- hosts: surveytool
2  become: yes
3  vars_files:
4    - vars/main.yml
5    - local-vars/local.yml
6  roles:
7    - { role: geerlingguy.nginx }
8  tasks:
9    - name: Setup reverse proxy
10      blockinfile:
11        path: /etc/nginx/sites-enabled/default
12        block: |
13          # proxy /cldr-apps/ to openliberty, with generous timeouts
14          proxy_connect_timeout 60s;
15          proxy_send_timeout 500s;
16          proxy_read_timeout 500s;
17          location /cldr-apps/ {
18            rewrite ^/(.+)\._[\da-f]+_\.(js|css)$ /$1.$2 break;
19            allow all;
20            proxy_pass http://localhost:9080/cldr-apps/;
21            proxy_set_header Host $host;
22            proxy_set_header X-Real-IP $remote_addr;
23            proxy_set_header X-Forwarded-For $remote_addr;
24            proxy_set_header X-Forwarded-Proto $scheme;
25          }
26          location /openapi/ {
27            allow all;
28            proxy_pass http://localhost:9080/openapi/;
29            proxy_set_header Host $host;
30            proxy_set_header X-Real-IP $remote_addr;
31            proxy_set_header X-Forwarded-For $remote_addr;
32            proxy_set_header X-Forwarded-Proto $scheme;
33          }
34        marker: '# {mark} ANSIBLE MANAGED BLOCK'
35        insertafter: '^[\s]*server_name' # the LAST uncommented server block
36      notify: 'Restart Nginx'
37    - name: Setup index.html
38      copy:
39        src: templates/index.html
40        dest: /var/www/html
41        owner: root
42        group: root
43        mode: '0644'
44  handlers:
45    - name: Restart Nginx
46      service:
47        name: nginx
48        state: restarted
49