Compare commits

..

5 Commits

Author SHA1 Message Date
7dd6b51c2c duplicate default var defintition 2025-02-19 18:14:26 +01:00
3db2160549 remove dev to apache 2025-02-18 13:54:55 +01:00
dfdae74445 fix modules enabling code 2025-02-18 12:17:49 +01:00
2d4e5a5853 add some modules, include http2 2024-12-19 11:13:13 +01:00
a882c50e2a manual merge 2024-05-23 09:34:31 +02:00
8 changed files with 25 additions and 20 deletions

View File

@@ -15,3 +15,10 @@ apache_use_ssl: true
apache_use_stats: true apache_use_stats: true
apache_user: "{{ apache_server_name | regex_search( '([^.]+)' ) }}" apache_user: "{{ apache_server_name | regex_search( '([^.]+)' ) }}"
apache_use_database: false apache_use_database: false
apache_modules_list:
- headers
- http2
- rewrite
- proxy
- proxy_http
- proxy_fcgi

View File

@@ -47,7 +47,6 @@ galaxy_info:
# Maximum 20 tags per role. # Maximum 20 tags per role.
dependencies: dependencies:
- role: tconstans.apache
- { role: tco.changelog, myrole_name: ansible_apache_vhost } - { role: tco.changelog, myrole_name: ansible_apache_vhost }
# List your role dependencies here, one per line. Be sure to remove the '[]' above, # List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list. # if you add dependencies to this list.

View File

@@ -1,12 +1,8 @@
--- ---
# tasks file for apache_vhost # tasks file for apache_vhost
<<<<<<< HEAD - include_vars: "{{ ansible_os_family}}.yml"
- include_vars: "{{ ansible_os_family|lower }}.yml"
tags: always tags: always
=======
- include_vars: "{{ ansible_os_family }}.yml"
>>>>>>> certbot
- name: create dedicated user - name: create dedicated user
user: user:
@@ -43,6 +39,14 @@
- "{{ apache_base_dir }}/session" - "{{ apache_base_dir }}/session"
- "{{ apache_base_dir }}/wsdlcache" - "{{ apache_base_dir }}/wsdlcache"
- name: enable some modules
when: ansible_os_family == 'Debian'
tags: modules
community.general.apache2_module:
state: present
name: "{{ item }}"
loop: "{{ apache_modules_list }}"
- name: dns setup - name: dns setup
include_tasks: dns.yml include_tasks: dns.yml
when: apache_use_dns when: apache_use_dns
@@ -74,4 +78,5 @@
- name: goaccess - name: goaccess
import_tasks: goaccess.yml import_tasks: goaccess.yml
when: apache_use_stats when: apache_use_stats
tags: stats tags: stats

View File

@@ -11,10 +11,12 @@
Options +indexes Options +indexes
</Directory> </Directory>
{%if apache_use_ssl %} {%if apache_use_ssl %}
<IfModule rewrite>
RewriteEngine on RewriteEngine on
RewriteCond %{HTTPS} off RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} "!^/\.well-known" RewriteCond %{REQUEST_URI} "!^/\.well-known"
RewriteRule (.*) https://%{SERVER_NAME}$1 [R,L] RewriteRule (.*) https://%{SERVER_NAME}$1 [R,L]
</IfModule>
{%endif %} {%endif %}
</VirtualHost> </VirtualHost>
@@ -26,6 +28,7 @@
ServerAlias {{ alias }} ServerAlias {{ alias }}
{%endfor%} {%endfor%}
{%endif%} {%endif%}
Protocols h2 http/1.1
DocumentRoot {{ apache_document_root }} DocumentRoot {{ apache_document_root }}
SSLEngine on SSLEngine on
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1

View File

@@ -1,7 +1,7 @@
#/home/tom/Documents/Opendoor/Technique/Ansible/roles/tconstans.apache/vars/Debian.yml #/home/tom/Documents/Opendoor/Technique/Ansible/roles/tconstans.apache/vars/Debian.yml
apache_config_dir: /etc/apache2/sites-enabled/
apache_packages: apache_packages:
- apache2 - apache2
apache_ssl_packages: openssl apache_ssl_packages: openssl
apache_service: apache2
apache_group: www-data apache_group: www-data
apache_service_name: apache2
apache_config_dir: /etc/apache2/sites-enabled/

View File

@@ -1,8 +1,7 @@
#/home/tom/Documents/Opendoor/Technique/Ansible/roles/tco.apache_vhost/vars/RedHat.yml
#/home/tom/Documents/Opendoor/Technique/Ansible/roles/tconstans.apache/vars/Debian.yml
apache_config_dir: /etc/httpd/conf.d/ apache_config_dir: /etc/httpd/conf.d/
apache_packages: apache_packages:
- httpd - httpd
apache_service: httpd apache_service_name: httpd
apache_ssl_packages: mod_ssl apache_ssl_packages: mod_ssl
apache_group: apache apache_group: apache

View File

@@ -1,4 +0,0 @@
---
apache_group: www-data
apache_config_dir: /etc/apache2/sites-enabled/
apache_service_name: apache2

View File

@@ -1,4 +0,0 @@
---
apache_group: apache
apache_config_dir: /etc/httpd/conf.d/
apache_service_name: httpd