271 lines
8.3 KiB
YAML
271 lines
8.3 KiB
YAML
|
---
|
||
|
|
- name: Converge
|
||
|
|
hosts: all
|
||
|
|
roles:
|
||
|
|
- role: ansible-role-nginx
|
||
|
|
vars:
|
||
|
|
nginx_debug_output: true
|
||
|
|
|
||
|
|
nginx_main_template_enable: true
|
||
|
|
nginx_main_template:
|
||
|
|
template_file: nginx.conf.j2
|
||
|
|
conf_file_name: nginx.conf
|
||
|
|
conf_file_location: /etc/nginx/
|
||
|
|
user: nginx
|
||
|
|
worker_processes: auto
|
||
|
|
error_level: warn
|
||
|
|
worker_connections: 1024
|
||
|
|
http_enable: true
|
||
|
|
http_settings:
|
||
|
|
keepalive_timeout: 65
|
||
|
|
cache: false
|
||
|
|
rate_limit: false
|
||
|
|
keyval: false
|
||
|
|
stream_enable: true
|
||
|
|
http_global_autoindex: false
|
||
|
|
|
||
|
|
nginx_http_template_enable: true
|
||
|
|
nginx_http_template:
|
||
|
|
app:
|
||
|
|
template_file: http/default.conf.j2
|
||
|
|
conf_file_name: default.conf
|
||
|
|
conf_file_location: /etc/nginx/conf.d/
|
||
|
|
listen:
|
||
|
|
listen_localhost:
|
||
|
|
ip: 0.0.0.0
|
||
|
|
port: 80
|
||
|
|
opts:
|
||
|
|
- default_server
|
||
|
|
server_name: localhost
|
||
|
|
error_page: /usr/share/nginx/html
|
||
|
|
client_max_body_size: 512k
|
||
|
|
proxy_hide_headers:
|
||
|
|
- X-Powered-By
|
||
|
|
add_headers:
|
||
|
|
strict_transport_security:
|
||
|
|
name: Strict-Transport-Security
|
||
|
|
value: max-age=15768000; includeSubDomains
|
||
|
|
always: true
|
||
|
|
reverse_proxy:
|
||
|
|
proxy_cache_path:
|
||
|
|
- path: /var/cache/nginx/proxy/frontend
|
||
|
|
keys_zone:
|
||
|
|
name: frontend_proxy_cache
|
||
|
|
size: 5m
|
||
|
|
levels: "1:2"
|
||
|
|
max_size: 5g
|
||
|
|
inactive: 30m
|
||
|
|
use_temp_path: true
|
||
|
|
- path: /var/cache/nginx/proxy/backend
|
||
|
|
keys_zone:
|
||
|
|
name: backend_proxy_cache
|
||
|
|
size: 10m
|
||
|
|
levels: "1:2"
|
||
|
|
max_size: 10g
|
||
|
|
inactive: 60m
|
||
|
|
use_temp_path: true
|
||
|
|
proxy_temp_path:
|
||
|
|
path: /var/cache/nginx/proxy/temp
|
||
|
|
proxy_cache_lock: true
|
||
|
|
proxy_cache_min_uses: 5
|
||
|
|
proxy_cache_revalidate: true
|
||
|
|
proxy_cache_use_stale:
|
||
|
|
- error
|
||
|
|
- timeout
|
||
|
|
proxy_ignore_headers:
|
||
|
|
- Expires
|
||
|
|
locations:
|
||
|
|
frontend:
|
||
|
|
location: /
|
||
|
|
proxy_hide_headers:
|
||
|
|
- X-Powered-By
|
||
|
|
add_headers:
|
||
|
|
strict_transport_security:
|
||
|
|
name: Strict-Transport-Security
|
||
|
|
value: max-age=15768000; includeSubDomains
|
||
|
|
always: true
|
||
|
|
another_header:
|
||
|
|
name: Fancy-New-Header-To-Test
|
||
|
|
value: testing=true
|
||
|
|
always: false
|
||
|
|
proxy_pass: http://frontend_servers/
|
||
|
|
proxy_cache: frontend_proxy_cache
|
||
|
|
proxy_temp_path:
|
||
|
|
path: /var/cache/nginx/proxy/frontend/temp
|
||
|
|
proxy_cache_lock: false
|
||
|
|
proxy_cache_min_uses: 3
|
||
|
|
proxy_cache_revalidate: false
|
||
|
|
proxy_cache_use_stale:
|
||
|
|
- http_403
|
||
|
|
- http_404
|
||
|
|
proxy_ignore_headers:
|
||
|
|
- Vary
|
||
|
|
- Cache-Control
|
||
|
|
proxy_redirect: false
|
||
|
|
proxy_set_header:
|
||
|
|
header_host:
|
||
|
|
name: Host
|
||
|
|
value: $host
|
||
|
|
header_x_real_ip:
|
||
|
|
name: X-Real-IP
|
||
|
|
value: $remote_addr
|
||
|
|
header_x_forwarded_for:
|
||
|
|
name: X-Forwarded-For
|
||
|
|
value: $proxy_add_x_forwarded_for
|
||
|
|
header_x_forwarded_proto:
|
||
|
|
name: X-Forwarded-Proto
|
||
|
|
value: $scheme
|
||
|
|
proxy_buffering: false
|
||
|
|
client_max_body_size: 5m
|
||
|
|
backend:
|
||
|
|
location: /backend
|
||
|
|
proxy_pass: http://backend_servers/
|
||
|
|
proxy_cache: backend_proxy_cache
|
||
|
|
proxy_temp_path:
|
||
|
|
path: /var/cache/nginx/proxy/backend/temp
|
||
|
|
proxy_cache_lock: true
|
||
|
|
proxy_cache_min_uses: 2
|
||
|
|
proxy_cache_revalidate: true
|
||
|
|
proxy_cache_use_stale:
|
||
|
|
- http_500
|
||
|
|
- http_502
|
||
|
|
- http_503
|
||
|
|
proxy_redirect: default
|
||
|
|
proxy_set_header:
|
||
|
|
header_host:
|
||
|
|
name: Host
|
||
|
|
value: $host
|
||
|
|
header_x_real_ip:
|
||
|
|
name: X-Real-IP
|
||
|
|
value: $remote_addr
|
||
|
|
header_x_forwarded_for:
|
||
|
|
name: X-Forwarded-For
|
||
|
|
value: $proxy_add_x_forwarded_for
|
||
|
|
header_x_forwarded_proto:
|
||
|
|
name: X-Forwarded-Proto
|
||
|
|
value: $scheme
|
||
|
|
proxy_cookie_path:
|
||
|
|
path: /web/
|
||
|
|
replacement: /
|
||
|
|
upstreams:
|
||
|
|
frontend_upstream:
|
||
|
|
name: frontend_servers
|
||
|
|
lb_method: least_conn
|
||
|
|
zone_name: frontend_mem_zone
|
||
|
|
zone_size: 64k
|
||
|
|
sticky_cookie: false
|
||
|
|
servers:
|
||
|
|
frontend_server_1:
|
||
|
|
address: 0.0.0.0
|
||
|
|
port: 8081
|
||
|
|
weight: 1
|
||
|
|
health_check: max_fails=3 fail_timeout=5s
|
||
|
|
backend_upstream:
|
||
|
|
name: backend_servers
|
||
|
|
lb_method: least_conn
|
||
|
|
zone_name: backend_mem_zone
|
||
|
|
zone_size: 64k
|
||
|
|
sticky_cookie: false
|
||
|
|
servers:
|
||
|
|
backend_server_1:
|
||
|
|
address: 0.0.0.0
|
||
|
|
port: 8082
|
||
|
|
weight: 1
|
||
|
|
health_check: max_fails=3 fail_timeout=5s
|
||
|
|
returns:
|
||
|
|
return301:
|
||
|
|
location: ^~ /old-path
|
||
|
|
code: 301
|
||
|
|
value: http://$host/new-path
|
||
|
|
frontend:
|
||
|
|
template_file: http/default.conf.j2
|
||
|
|
conf_file_name: frontend_default.conf
|
||
|
|
conf_file_location: /etc/nginx/conf.d/
|
||
|
|
listen:
|
||
|
|
listen_localhost:
|
||
|
|
port: 8081
|
||
|
|
opts: []
|
||
|
|
server_name: localhost
|
||
|
|
error_page: /usr/share/nginx/html
|
||
|
|
autoindex: false
|
||
|
|
web_server:
|
||
|
|
locations:
|
||
|
|
frontend_site:
|
||
|
|
location: /
|
||
|
|
proxy_hide_headers:
|
||
|
|
- X-Powered-By
|
||
|
|
html_file_location: /usr/share/nginx/html
|
||
|
|
html_file_name: frontend_index.html
|
||
|
|
autoindex: false
|
||
|
|
http_demo_conf: true
|
||
|
|
backend:
|
||
|
|
template_file: http/default.conf.j2
|
||
|
|
conf_file_name: backend_default.conf
|
||
|
|
conf_file_location: /etc/nginx/conf.d/
|
||
|
|
listen:
|
||
|
|
listen_localhost:
|
||
|
|
port: 8082
|
||
|
|
opts: []
|
||
|
|
server_name: localhost
|
||
|
|
error_page: /usr/share/nginx/html
|
||
|
|
autoindex: false
|
||
|
|
web_server:
|
||
|
|
locations:
|
||
|
|
backend_site:
|
||
|
|
location: /
|
||
|
|
html_file_location: /usr/share/nginx/html
|
||
|
|
html_file_name: backend_index.html
|
||
|
|
autoindex: false
|
||
|
|
http_demo_conf: true
|
||
|
|
nginx_html_demo_template_enable: true
|
||
|
|
nginx_html_demo_template:
|
||
|
|
frontend:
|
||
|
|
template_file: www/index.html.j2
|
||
|
|
html_file_name: frontend_index.html
|
||
|
|
html_file_location: /usr/share/nginx/html
|
||
|
|
web_server_name: Frontend
|
||
|
|
backend:
|
||
|
|
template_file: www/index.html.j2
|
||
|
|
html_file_name: backend_index.html
|
||
|
|
html_file_location: /usr/share/nginx/html
|
||
|
|
web_server_name: Backend
|
||
|
|
|
||
|
|
nginx_stream_template_enable: true
|
||
|
|
nginx_stream_template:
|
||
|
|
default:
|
||
|
|
template_file: stream/default.conf.j2
|
||
|
|
conf_file_name: default.conf
|
||
|
|
conf_file_location: /etc/nginx/conf.d/stream
|
||
|
|
network_streams:
|
||
|
|
app:
|
||
|
|
listen_address: 0.0.0.0
|
||
|
|
listen_port: 8090
|
||
|
|
udp_enable: false
|
||
|
|
proxy_pass: backend
|
||
|
|
proxy_timeout: 3s
|
||
|
|
proxy_connect_timeout: 1s
|
||
|
|
proxy_protocol: false
|
||
|
|
health_check_plus: false
|
||
|
|
upstreams:
|
||
|
|
backend_upstream:
|
||
|
|
name: backend
|
||
|
|
lb_method: least_conn
|
||
|
|
zone_name: backend
|
||
|
|
zone_size: 64k
|
||
|
|
sticky_cookie: false
|
||
|
|
servers:
|
||
|
|
backend_server_1:
|
||
|
|
address: 0.0.0.0
|
||
|
|
port: 8091
|
||
|
|
weight: 1
|
||
|
|
health_check: max_fails=1 fail_timeout=10s
|
||
|
|
|
||
|
|
nginx_modules:
|
||
|
|
njs: true
|
||
|
|
perl: true
|
||
|
|
waf: false
|
||
|
|
geoip: true
|
||
|
|
image_filter: true
|
||
|
|
rtmp: true
|
||
|
|
xslt: true
|