tweak apache2 config
[ansible.git] / roles / apache / tasks / main.yml
index 9b6c82e12fd99deede7ed5c6bbd7145209bea315..62f39e8ca677b5377a89eed58435470713d6f973 100644 (file)
@@ -1,8 +1,8 @@
 - name: install apache
-  apt: name=apache2 state=latest
+  apt: name=apache2,python-netaddr state=latest
 - name: enable apache
   service: name=apache2 enabled=yes
-# config
+# apache config
 - name: enable modules
   apache2_module:
     state: present
   - ssl
   - macro
   notify: apache
+- name: disable modules
+  apache2_module:
+    state: absent
+    name: "{{ item }}"
+  loop:
+  - access_compat
+  notify: apache
+- name: install log anonymization script
+  copy:
+    dest: /etc/apache2/log-anon
+    src: files/log-anon
+    mode: +x
 - name: install shared config files
   copy:
     dest: /etc/apache2/conf-available/{{ item }}
@@ -21,7 +33,6 @@
   - acme-challenge.conf
   - php5.conf
   - security.conf
-  - other-vhosts-access-log.conf
   notify: apache
 - name: enable config files
   command: a2enconf {{ item }}
     creates: /etc/apache2/conf-enabled/{{ item }}.conf
   loop:
   - ssl
+  - security
+  notify: apache
+- name: disable config files
+  command: a2disconf {{ item }}
+  args:
+    removes: /etc/apache2/conf-enabled/{{ item }}.conf
+  loop:
+  - other-vhosts-access-log
+  notify: apache
 - name: install default site
   template:
     dest: /etc/apache2/sites-available/000-default.conf