add a way to include common configuration files. about ansible-role-nginx HOT 5 CLOSED

Hi @jrobeson ,

nginx_configs don't cover your needs ?

nginx_configs:
  ssl:
      - ssl_protocols TLSv1 TLSv1.1 TLSv1.2
      - ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:AES128:AES256:RC4-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK
      - ssl_prefer_server_ciphers on
      - ssl_stapling on
      - ssl_stapling_verify on

It will create and include /etc/nginx/conf.d/ssl.conf

from ansible-role-nginx.

if a host doesn't use ssl, will this cause any performance issues for them? I'm not sure how nginx deals with this, as i don't usually have a config with some ssl and some not.

from ansible-role-nginx.

The ssl_* parameters only impact if you have this line on a server {} block :

listen port_number ssl

I always do like that and It doesn't impact non ssl config.

from ansible-role-nginx.

my other usecase for this is my app. I have two different playbooks. One for an applicance/standalone machine and another for the hosted/sass version. They all share the same app configuration, but the hosts names, ssl availablility, and ports are all different. I'd prefer not to duplicate the same 30 line app configuration between these two different playbooks. It'd be too easy to get out of sync.

Of course, this problem would be pretty easily solved if ansible allowed a per dict instance for merging instead of only the global setting.

from ansible-role-nginx.

You can now do that with the new notation of the v1.2 👍
https://github.com/jdauphant/ansible-role-nginx/releases/tag/v1.2

Thanks for your help @jrobeson

from ansible-role-nginx.