Commit Graph

376 Commits

Author SHA1 Message Date
Philip Henning
f5f3a65fd8 Add proxy_buffering directive to reverse proxy block (#149) 2019-07-15 14:41:19 +02:00
Philip Henning
2d803f207c Add ssl_session_tickets directive. (#145) 2019-07-15 14:41:04 +02:00
Philip Henning
37641fcdf1 Add auth_request_set directive (#154) 2019-07-12 20:14:46 +02:00
Philip Henning
43fdafe1b1 Add websockets configuration back to http template (#140)
* Add websockets config back to template

* Implement #111 Changes for proxy_http_version and made it configurable.

* Moved out of the websockets block and make it independently configurable
2019-07-12 19:59:25 +02:00
Philip Henning
c730f522f1 Add directive ssl_prefer_server_ciphers (#143) 2019-07-12 19:56:11 +02:00
Philip Henning
e3902b6cb2 Add directives to use OCSP Stapling (#142) 2019-07-12 19:55:37 +02:00
Philip Henning
155c13c140 Add add_header support for either server and location block (#141)
* Add `add_header` support for either `server` and `location` block

* Add Tests for adding headers to either server and location block
2019-06-14 11:33:50 +01:00
Grzegorz Dzien
17ea0dea29
Merge pull request #138 from shokinn/master
Catch-all ("_") check for https redirect
2019-06-11 10:08:40 +01:00
Philip Henning
956f37ac06 Add check if catch-all ("_") is used as server_name and if so replace _ with . 2019-06-08 20:15:21 +02:00
Grzegorz Dzien
e8295ef303
Merge pull request #131 from nginxinc/fix-metadata
Fix missing versions field
2019-05-22 17:28:31 +01:00
Alessandro Fael Garcia
40caaa7ae0 Re-add api.conf.j2 in right directory (#130)
* Add api.conf.j2
2019-05-22 17:27:47 +01:00
Alessandro Fael Garcia
ab831b0f7d Fix missing versions field 2019-05-22 16:06:07 +02:00
Alessandro Fael Garcia
feda384b94 Improve role handling (#128)
* Improve role handling

* Add defaults to some tasks

* Improve template conditionals
2019-05-21 16:23:06 +01:00
Alessandro Fael Garcia
f3ec78e7ae Add support to the role for RHEL 8 and Alpine Linux (#129)
* Add support to the role for RHEL 8 and Alpine Linux

* Add NGINX Open Source support for Alpine Linux

* Add NGINX Open Source support for SLES 15

* Update supported platforms matrix
2019-05-20 17:32:08 +01:00
Sathish Ramani
df98f1a244 Allow auth basic to be added to global (server) (#125)
* Add auth basic for global level

* Change auth_basic_file to auth_basic_user_file
2019-05-20 14:48:24 +01:00
Alessandro Fael Garcia
898c5a5f9c Remove Ubuntu Artful test (#127)
* Remove Ubuntu artful test

* Remove Artful from Travis build matrix
2019-05-17 14:01:55 +01:00
Tom Gamull
783d29639c Http auth req additions - issue 120 (#121)
* added http_auth_req

* removed existing set-headers

* is defined for proxy_pass_request_body
2019-04-18 10:51:44 +01:00
Grzegorz Dzien
e2ec4f6969
Merge pull request #119 from etcet/master
Reference the correct variable name in comment
2019-04-10 15:07:47 +01:00
Chris James
4b06d33360 Reference the correct variable name in comment 2019-04-09 14:50:45 -05:00
Christopher Blanchard
a7d3164ba1 Amplify installation fixes (#113)
* Remove syntax error

When evaluated (i.e. when nginx_amplify_enable=true and
nginx_amplify_api_key is defined) this line causes a syntax error

To check for empty string, opted for temporary solution outlined in https://github.com/ansible/ansible-lint/issues/457

* Fix reference to amplify api key

Previously was labelled `amplify_api_key`. Changed to
`nginx_amplify_api_key` in #a55a50d

* Fix reference to default config file

On my system at least (bionic), the default configuration file is
`/etc/amplify-agent/agent.conf.default`

This is also assumed be to the case on the amplify install shell script https://github.com/nginxinc/nginx-amplify-agent/blob/master/packages/install.sh#L526
2019-04-08 14:27:36 +01:00
Shaun Smiley
e658031360 Add ssl_dhparam option (#114)
* add dhparam to README

* add dhparam to defaults/main.yml
2019-04-08 14:16:28 +01:00
Tom Gamull
4c96e196d4 Added support for try_files (#117)
* Added support for try_files

* updated try_files for server and web server

* change stream test template port to 81 for travis

* Fix for travis test and localhost error
2019-04-04 19:09:42 +01:00
Grzegorz Dzien
1cf74a5d5e
Merge pull request #112 from pillarsdotnet/master
Make starting the nginx service optional.
2019-03-29 16:24:55 +00:00
Robert August Vincent II
29a87f09c3 Document nginx_start variable. 2019-03-21 08:35:34 -04:00
Robert August Vincent II
58b3b71077 Add configuration variable for starting nginx service. 2019-03-21 08:32:27 -04:00
Grzegorz Dzien
a68ddd708d
Merge pull request #110 from platan/proxy_timeouts
Allow to set proxy_connect_timeout and proxy_read_timeout per reverse proxy
2019-03-19 12:19:15 +00:00
Marcin Mielnicki
826494472e
Default values in README 2019-03-08 17:45:59 +01:00
Marcin Mielnicki
d2a6f4b81e
Allow to set proxy_connect_timeout and proxy_read_timeout per reverse proxy 2019-03-07 21:34:22 +01:00
Grzegorz Dzien
1d30d42c68
Merge pull request #109 from downingar/api_file
Changing the API config to be a template
2019-03-01 15:15:28 +00:00
Alan Downing
e0bbce9b7f Changing the API config to be a template 2019-02-28 14:27:18 -05:00
Grzegorz Dzien
6fa36689e7
Merge pull request #107 from etcet/multiline-ansible-managed
Support multi-line ansible_managed messages
2019-02-22 17:31:23 +00:00
Timothy Allen
328318bc19 Advance SSL and proxy SSL settings (#100)
* Added stream template variables
* Added logic in Stream template
* Add udp variable
* Add ssl protocols and ciphers
* Add advance ssl to template
* Add SSL variables
2019-02-22 17:28:19 +00:00
Chris James
60381b31c1 Support multi-line ansible_managed messages 2019-02-22 10:48:17 -06:00
Alessandro Fael Garcia
b7913c6c4d Fix line limit Ansible lint warnings (#106) 2019-02-19 16:15:04 +00:00
Alessandro Fael Garcia
8695f49f2b Refactor signing key tasks (#105) 2019-02-19 15:30:10 +00:00
Alexander Rublev
469d663bc2 Add proxy_redirect parameter for location blocks (#102)
* Add proxy_redirect parameter for http and location blocks (#1)

* Use ternary() filter to handle proxy_redirect parameter
2019-02-18 14:23:57 +00:00
Alessandro Fael Garcia
589d668def Add parameter to cleanup existing NGINX configs (#103) 2019-02-15 14:51:09 +00:00
Alessandro Fael Garcia
171b7d0cce Add root parameter to server context (#104)
* Add root parameter to server context

* Update NGINX Unit test playbook
2019-02-15 13:59:38 +00:00
Alexander Rublev
f29d9c33f0 Allow setting basic parameters for proxy cache (#94)
* Add parameters for proxy cache
2019-02-12 15:12:40 +00:00
Marcin Mielnicki
80f6157692 Support for configuration of basic authentication (#99)
* Support for basic authentication
2019-02-12 12:32:11 +00:00
carlba
8db44bf979 Websocket support enabled for reverse proxy locations. (#97)
* Websocket support for reverse proxy locations.
2019-02-08 13:32:32 +00:00
Timothy Allen
3a66e10a17 Basic stream template (#92)
* Add Stream template defaults
* Add stream default config template
* Added stream template variables
* Changed Ansible task to use new stream template
2019-02-06 12:39:48 +00:00
Izak Eygelaar
f79e6d0210 Allow making use of Ansible-vault to encrypt and decrypt sensitive certs and keys (#95)
* Allow making use of Ansible-vault to encrypt sensitive certs and keys
2019-02-01 18:59:56 +00:00
Alessandro Fael Garcia
8ead2b7c00
Install RTMP only when using NGINX Plus (#91)
* Install RTMP only when using NGINX Plus

* Make GeoIP and NJS module tasks idempotent
2019-01-21 17:20:16 +01:00
Alessandro Fael Garcia
6693791de2
Fix module install task (#89)
* Fix module install task

* Fix perl module
2019-01-21 12:34:44 +01:00
Alessandro Fael Garcia
1d3b03ea2b
Improve tests (#90)
* Update .travis.yml

* Create Travis build matrix

* Add nginx-modules.yml test playbook to Travis build matrix

* Improve template test playbook

* Change HTML template variables from Ansible to NGINX variables
2019-01-21 12:19:30 +01:00
Alessandro Fael Garcia
fdfff7efca Revert upload destinations 2019-01-14 17:37:49 +01:00
Alessandro Fael Garcia
bcc3f1e166 Improve templating
* Rename load_balancer block to reverse_proxy
* Clarify that the redirect variable refers to a http to https redirect
* Allow setting the listen port when using SSL
* Improve SSL defaults
* Allow setting http or https server locations in proxy_pass
2019-01-14 17:26:37 +01:00
Alessandro Fael Garcia
c1c3a372d7
Allow setting a custom apt and rpm signing key host (#84)
* Allow setting a custom apt and rpm signing key host

* Change default fallback key to https

* Use facts to determine which signing key to use

* Add single quotes
2019-01-09 00:26:14 +01:00
Daniel Mills
bd09ecd85e Add support for enabling an http to https redirects (#82)
* Add support for enabling an http to https redirects

* Remove extra curly brace

* Update default.conf.j2

Remove another extra curly brace

* Add redirect variable to defaults and readme
2019-01-03 23:14:25 +01:00