infra.git/roles/nginx/files, branch masterAnsible playbooks for personal infrastructure.https://git.ilvokhin.com/infra.git/atom?h=master2024-04-14T18:27:14ZMake certificate updates work for nginx2024-04-14T18:27:14ZDmitry Ilvokhind@ilvokhin.com2024-04-14T18:27:14Zurn:sha1:899eca5f024f22b67aa032dd82aa4393b60b85e4
Currently, we obtain certificates from Let's Encrypt with standalone
mode, so when we do renew, certbot tries to run it is own webserver on
port 80, but this port is already in use by nginx.
Stop nginx, before renewal. This is quite hacky, but should work. Proper
solution is to split certificate role by standalone and non-standalone
versions.
Migrate to certbot hook scripts2024-03-31T11:34:38ZDmitry Ilvokhind@ilvokhin.com2024-03-31T11:34:38Zurn:sha1:dae57df8d747bb602ab9ef13007949b43e88df10
Make hooks usage a bit more generic, to apply hooks for services
different from nginx.
Change nginx worker_processes from 1 to auto2024-02-04T12:07:51ZDmitry Ilvokhind@ilvokhin.com2024-02-04T12:07:51Zurn:sha1:58e7837450a40e003f9ff2abea0c97d60ee752f0
Just to make it a little bit more generic.
Enable tcp_nopush and tcp_nodelay for nginx2024-01-28T15:25:19ZDmitry Ilvokhind@ilvokhin.com2024-01-28T15:25:19Zurn:sha1:4de52db6f90ade9142c2f12988bba0b529137f95
For compatibility with CentOS 7 nginx config.
Make nginx a role2024-01-06T18:53:54ZDmitry Ilvokhind@ilvokhin.com2024-01-06T18:53:54Zurn:sha1:6c781bb8b9b5dea1f3cdb75a6cbde2b9e8942e8c