projects
/
ansible.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
add script to easily play site.yml
[ansible.git]
/
roles
/
apache
/
tasks
/
main.yml
diff --git
a/roles/apache/tasks/main.yml
b/roles/apache/tasks/main.yml
index 12f9580c632affec50528d7558f1022e817eb2c7..c195ea935d346f2b8232048bb4732b54cf02ede8 100644
(file)
--- a/
roles/apache/tasks/main.yml
+++ b/
roles/apache/tasks/main.yml
@@
-1,8
+1,8
@@
- name: install apache
- name: install apache
- apt: name=apache2 state=latest
+ apt: name=apache2
,python-netaddr
state=latest
- name: enable apache
service: name=apache2 enabled=yes
- name: enable apache
service: name=apache2 enabled=yes
-# config
+#
apache
config
- name: enable modules
apache2_module:
state: present
- name: enable modules
apache2_module:
state: present
@@
-19,16
+19,22
@@
loop:
- access_compat
notify: apache
loop:
- access_compat
notify: apache
-- name: install
shared config files
+- name: install
log anonymization script
copy:
copy:
+ dest: /etc/apache2/log-anon
+ src: files/log-anon
+ mode: +x
+ notify: apache
+- name: install shared config files
+ template:
dest: /etc/apache2/conf-available/{{ item }}
dest: /etc/apache2/conf-available/{{ item }}
- src:
fil
es/{{ item }}
+ src:
templat
es/{{ item }}
loop:
- ssl.conf
- acme-challenge.conf
- php5.conf
- security.conf
loop:
- ssl.conf
- acme-challenge.conf
- php5.conf
- security.conf
- -
other-vhosts-access-log
.conf
+ -
defaults
.conf
notify: apache
- name: enable config files
command: a2enconf {{ item }}
notify: apache
- name: enable config files
command: a2enconf {{ item }}
@@
-36,6
+42,17
@@
creates: /etc/apache2/conf-enabled/{{ item }}.conf
loop:
- ssl
creates: /etc/apache2/conf-enabled/{{ item }}.conf
loop:
- ssl
+ - security
+ - defaults
+ notify: apache
+- name: disable config files
+ command: a2disconf {{ item }}
+ args:
+ removes: /etc/apache2/conf-enabled/{{ item }}.conf
+ loop:
+ - other-vhosts-access-log
+ - serve-cgi-bin
+ notify: apache
- name: install default site
template:
dest: /etc/apache2/sites-available/000-default.conf
- name: install default site
template:
dest: /etc/apache2/sites-available/000-default.conf