projects
/
ansible.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
tweak apache2 config
[ansible.git]
/
roles
/
apache
/
tasks
/
main.yml
diff --git
a/roles/apache/tasks/main.yml
b/roles/apache/tasks/main.yml
index 9b6c82e12fd99deede7ed5c6bbd7145209bea315..62f39e8ca677b5377a89eed58435470713d6f973 100644
(file)
--- a/
roles/apache/tasks/main.yml
+++ b/
roles/apache/tasks/main.yml
@@
-1,8
+1,8
@@
- name: install apache
- name: install apache
- apt: name=apache2 state=latest
+ apt: name=apache2
,python-netaddr
state=latest
- name: enable apache
service: name=apache2 enabled=yes
- name: enable apache
service: name=apache2 enabled=yes
-# config
+#
apache
config
- name: enable modules
apache2_module:
state: present
- name: enable modules
apache2_module:
state: present
@@
-12,6
+12,18
@@
- ssl
- macro
notify: apache
- ssl
- macro
notify: apache
+- name: disable modules
+ apache2_module:
+ state: absent
+ name: "{{ item }}"
+ loop:
+ - access_compat
+ notify: apache
+- name: install log anonymization script
+ copy:
+ dest: /etc/apache2/log-anon
+ src: files/log-anon
+ mode: +x
- name: install shared config files
copy:
dest: /etc/apache2/conf-available/{{ item }}
- name: install shared config files
copy:
dest: /etc/apache2/conf-available/{{ item }}
@@
-21,7
+33,6
@@
- acme-challenge.conf
- php5.conf
- security.conf
- acme-challenge.conf
- php5.conf
- security.conf
- - other-vhosts-access-log.conf
notify: apache
- name: enable config files
command: a2enconf {{ item }}
notify: apache
- name: enable config files
command: a2enconf {{ item }}
@@
-29,6
+40,15
@@
creates: /etc/apache2/conf-enabled/{{ item }}.conf
loop:
- ssl
creates: /etc/apache2/conf-enabled/{{ item }}.conf
loop:
- ssl
+ - security
+ notify: apache
+- name: disable config files
+ command: a2disconf {{ item }}
+ args:
+ removes: /etc/apache2/conf-enabled/{{ item }}.conf
+ loop:
+ - other-vhosts-access-log
+ notify: apache
- name: install default site
template:
dest: /etc/apache2/sites-available/000-default.conf
- name: install default site
template:
dest: /etc/apache2/sites-available/000-default.conf