Merge branch 'gh271_ansible_and_nginx'

Fix #271

Author: php-coder

.gitignore

@@ -22,3 +22,6 @@ src/main/javascript/*/*.min.js
 .vagrant/
 vagrant/provisioning/vagrant.retry
 vagrant/provisioning/roles/php-coder.oraclejdk/
+vagrant/provisioning/roles/php-coder.nginx/
+vagrant/provisioning/roles/mystamps-nginx/files/prod/my-stamps.ru.key
+vagrant/provisioning/roles/mystamps-nginx/files/prod/my-stamps.ru.crt

vagrant/Vagrantfile

@@ -29,7 +29,8 @@ Vagrant.configure(2) do |config|
   # Create a forwarded port mapping which allows access to a specific port
   # within the machine from a port on the host machine. In the example below,
   # accessing "localhost:8080" will access port 80 on the guest machine.
-  # config.vm.network "forwarded_port", guest: 80, host: 8080
+  config.vm.network "forwarded_port", guest: 80, host: 8080
+  config.vm.network "forwarded_port", guest: 443, host: 8443
 
   # Provider-specific configuration so you can fine-tune various
   # backing providers for Vagrant. These expose provider-specific options.

vagrant/provisioning/roles/mystamps-app/tasks/main.yml

@@ -18,6 +18,14 @@
     dest: /etc/init.d/mystamps
     state: link
 
+- name: Creating /data/logs
+  file:
+    path: /data/logs
+    owner: mystamps
+    group: mystamps
+    mode: '0755'
+    state: directory
+
 - name: Running service
   service:
     name: mystamps

vagrant/provisioning/roles/mystamps-nginx/files/my-stamps.ru.crt

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

vagrant/provisioning/roles/mystamps-nginx/files/my-stamps.ru.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

vagrant/provisioning/roles/mystamps-nginx/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+
+- name: Restarting nginx service
+  service:
+    name: nginx
+    state: restarted

vagrant/provisioning/roles/mystamps-nginx/tasks/main.yml

@@ -0,0 +1,83 @@
+---
+
+- name: Removing default nginx configuration
+  file:
+    path: /etc/nginx/conf.d/default.conf
+    state: absent
+  notify:
+  - Restarting nginx service
+
+- name: Updating permissions on /data/logs
+  file:
+    path: /data/logs
+    group: nginx
+    mode: '0775'
+    state: directory
+
+- name: Creating /data/nginx
+  file:
+    path: /data/nginx
+    owner: root
+    group: root
+    mode: '0755'
+    state: directory
+
+- name: Uploading configuration files
+  copy:
+    src: "../../src/main/config/nginx/{{ item }}"
+    dest: "/etc/nginx/conf.d/{{ item }}"
+    force: yes
+    backup: no
+    owner: root
+    group: root
+    mode: '0644'
+  with_items:
+  - mystamps-http.conf
+  - mystamps-ssl.conf
+  notify:
+  - Restarting nginx service
+
+- name: Uploading data files
+  copy:
+    src: "../../src/main/config/nginx/{{ item }}"
+    dest: "/data/nginx/{{ item }}"
+    force: yes
+    backup: no
+    owner: root
+    group: root
+    mode: '0644'
+  with_items:
+  - 503.en.html
+  - 503.ru.html
+  notify:
+  - Restarting nginx service
+
+- name: Uploading certificate (.key file)
+  copy:
+    src: "{{ item }}"
+    dest: "/etc/ssl/{{ item | basename }}"
+    force: yes
+    backup: no
+    owner: root
+    group: nginx
+    mode: '0640'
+  with_first_found:
+  - prod/my-stamps.ru.key
+  - my-stamps.ru.key
+  notify:
+  - Restarting nginx service
+
+- name: Uploading certificate (.crt file)
+  copy:
+    src: "{{ item }}"
+    dest: "/etc/ssl/{{ item | basename }}"
+    force: yes
+    backup: no
+    owner: root
+    group: nginx
+    mode: '0640'
+  with_first_found:
+  - prod/my-stamps.ru.crt
+  - my-stamps.ru.key
+  notify:
+  - Restarting nginx service

vagrant/provisioning/vagrant.yml

@@ -32,3 +32,11 @@
   - role: mystamps-app
     become: yes
     become_method: sudo
+
+  - role: php-coder.nginx
+    become: yes
+    become_method: sudo
+
+  - role: mystamps-nginx
+    become: yes
+    become_method: sudo

vagrant/requirements.yml

@@ -1,2 +1,4 @@
 - src: php-coder.oraclejdk
   version: '1.3'
+- src: php-coder.nginx
+  version: '1.1'