summaryrefslogtreecommitdiff
path: root/tasks/nginx_setup.yaml
blob: a57e52c4f771c5cfcdc94b19954ef6fb3b9b807c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
- name: remove /var/www/html directory
  file:
    path: /var/www/html
    state: absent
  ignore_errors: true

- name: remove /etc/nginx/sites-enabled directory
  file:
    path: /etc/nginx/sites-enabled
    state: absent

- name: remove /etc/nginx/sites-available directory
  file:
    path: /etc/nginx/sites-available
    state: absent

- name: ensure /var/www/html directory exists
  file:
    path: /var/www/html
    state: directory
    mode: '0755'
    owner: www-data
    group: www-data

- name: ensure /var/www/html/videos directory exists
  file:
    path: /var/www/html/videos
    state: directory
    mode: '0755'
    owner: www-data
    group: www-data

- name: copy font ttf /var/www/html
  template:
    src: files/MorePerfectDOSVGA.ttf
    dest: /var/www/html/MorePerfectDOSVGA.ttf
    owner: www-data
    group: www-data
    mode: '0644'

- name: copy web templates to /var/www/html
  template:
    src: "{{ item.src }}"
    dest: "/var/www/html/{{ item.path }}"
    owner: www-data
    group: www-data
    mode: '0644'
  with_community.general.filetree: templates/var/www/html
  when: item.state == "file"

- name: set directory permissions to 755
  ansible.builtin.file:
    path: /var/www/html/
    recurse: yes
    state: directory
    mode: '0755'
    owner: www-data
    group: www-data

- name: set file permissions to 644
  ansible.builtin.find:
    paths: /var/www/html/
    file_type: file
  register: found_files

- name: apply 644 permission on files
  ansible.builtin.file:
    path: "{{ item.path }}"
    mode: '0644'
    owner: www-data
    group: www-data
  loop: "{{ found_files.files }}"

- name: restart nginx
  systemd:
    name: nginx
    state: restarted
    enabled: true
  when: ansible_service_mgr == 'systemd'