projects
/
ansible.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
tweak apache2 config
[ansible.git]
/
roles
/
apache
/
tasks
/
main.yml
diff --git
a/roles/apache/tasks/main.yml
b/roles/apache/tasks/main.yml
index 12f9580c632affec50528d7558f1022e817eb2c7..62f39e8ca677b5377a89eed58435470713d6f973 100644
(file)
--- a/
roles/apache/tasks/main.yml
+++ b/
roles/apache/tasks/main.yml
@@
-1,8
+1,8
@@
- name: install apache
- name: install apache
- apt: name=apache2 state=latest
+ apt: name=apache2
,python-netaddr
state=latest
- name: enable apache
service: name=apache2 enabled=yes
- name: enable apache
service: name=apache2 enabled=yes
-# config
+#
apache
config
- name: enable modules
apache2_module:
state: present
- name: enable modules
apache2_module:
state: present
@@
-19,6
+19,11
@@
loop:
- access_compat
notify: apache
loop:
- access_compat
notify: apache
+- name: install log anonymization script
+ copy:
+ dest: /etc/apache2/log-anon
+ src: files/log-anon
+ mode: +x
- name: install shared config files
copy:
dest: /etc/apache2/conf-available/{{ item }}
- name: install shared config files
copy:
dest: /etc/apache2/conf-available/{{ item }}
@@
-28,7
+33,6
@@
- acme-challenge.conf
- php5.conf
- security.conf
- acme-challenge.conf
- php5.conf
- security.conf
- - other-vhosts-access-log.conf
notify: apache
- name: enable config files
command: a2enconf {{ item }}
notify: apache
- name: enable config files
command: a2enconf {{ item }}
@@
-36,6
+40,15
@@
creates: /etc/apache2/conf-enabled/{{ item }}.conf
loop:
- ssl
creates: /etc/apache2/conf-enabled/{{ item }}.conf
loop:
- ssl
+ - security
+ notify: apache
+- name: disable config files
+ command: a2disconf {{ item }}
+ args:
+ removes: /etc/apache2/conf-enabled/{{ item }}.conf
+ loop:
+ - other-vhosts-access-log
+ notify: apache
- name: install default site
template:
dest: /etc/apache2/sites-available/000-default.conf
- name: install default site
template:
dest: /etc/apache2/sites-available/000-default.conf