infra.git/roles/nginx, branch masterAnsible playbooks for personal infrastructure.https://git.ilvokhin.com/infra.git/atom?h=master2024-06-30T15:39:20ZCleanup quotes usage in YAML files2024-06-30T15:39:20ZDmitry Ilvokhind@ilvokhin.com2024-06-30T15:35:25Zurn:sha1:62adb64fe171ff18ff4417a710b69de256d1fdac
Seems quotes in YAML is a mess.
Official guidelines (see explanation here [1]) are following.
1. If you can get away without quotes, do not use them.
2. Use single quotes if you need quotes.
3. Use double quotes if you can't use single quotes for some reason.
Common reason for double quotes in this repository is line breaks for
long lines and control characters (\n, \t) in replacement patterns.
Hope, I didn't break anything.
Tested with following commands, because there are no changes in others.
$ ansible-playbook dotfiles.yml
$ ansible-playbook master.yml
[1]: https://stackoverflow.com/a/69850618/1313516
Migrate from `yes` to `true`2024-06-30T14:31:10ZDmitry Ilvokhind@ilvokhin.com2024-06-30T14:31:10Zurn:sha1:049d65270e73feaa4a6729fb660e5b9aee546391Remove trailing spaces2024-06-23T19:09:26ZDmitry Ilvokhind@ilvokhin.com2024-06-23T19:09:26Zurn:sha1:204f497f4c2fb3dfe86a66896551c088a00536c6Make certificate updates work for nginx2024-04-14T18:27:14ZDmitry Ilvokhind@ilvokhin.com2024-04-14T18:27:14Zurn:sha1:899eca5f024f22b67aa032dd82aa4393b60b85e4
Currently, we obtain certificates from Let's Encrypt with standalone
mode, so when we do renew, certbot tries to run it is own webserver on
port 80, but this port is already in use by nginx.
Stop nginx, before renewal. This is quite hacky, but should work. Proper
solution is to split certificate role by standalone and non-standalone
versions.
Swap order of nginx enablement and cert hook2024-03-31T12:50:12ZDmitry Ilvokhind@ilvokhin.com2024-03-31T12:50:12Zurn:sha1:283f389797b0056846580eef0f0a1729824d3e01Migrate to certbot hook scripts2024-03-31T11:34:38ZDmitry Ilvokhind@ilvokhin.com2024-03-31T11:34:38Zurn:sha1:dae57df8d747bb602ab9ef13007949b43e88df10
Make hooks usage a bit more generic, to apply hooks for services
different from nginx.
Configure nginx first and then enable/start2024-03-24T13:32:15ZDmitry Ilvokhind@ilvokhin.com2024-03-24T13:32:15Zurn:sha1:4e722e18f0014aed51fb51c130fb17ceb6f15200Make logrotate a dependencies for nginx2024-02-10T18:50:32ZDmitry Ilvokhind@ilvokhin.com2024-02-10T18:50:32Zurn:sha1:d72a4f788976fe461a1997c1bf9ca46dcc407097Change nginx worker_processes from 1 to auto2024-02-04T12:07:51ZDmitry Ilvokhind@ilvokhin.com2024-02-04T12:07:51Zurn:sha1:58e7837450a40e003f9ff2abea0c97d60ee752f0
Just to make it a little bit more generic.
Add nginx serving directory2024-02-03T18:03:07ZDmitry Ilvokhind@ilvokhin.com2024-02-03T18:03:07Zurn:sha1:0e1eb77cab42206e0f0e45233425003acf6317e1