lulzette/ansible-pet
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

templates

Browse Source
This commit is contained in:
lulzette 2021-02-25 18:02:15 +03:00
parent ce1ba77ad8
commit 7b6e82b702
5 changed files with 15 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
1/play.yml
View File

@ -3,4 +3,5 @@
roles:
- nginx
- php
- mysql
- mysql
- webapps

8
1/roles/nginx/files/sites-enabled/cloud.conf
View File

@ -1,10 +1,10 @@
server {
listen 80;
listen 443 ssl http2;
server_name cloud.xz777.ru;
server_name cloud.{{domain}};
index index.php;
ssl_certificate /etc/letsencrypt/live/cloud.xz777.ru/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/cloud.xz777.ru/privkey.pem; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/cloud.{{domain}}/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/cloud.{{domain}}/privkey.pem; # managed by Certbot
add_header X-Content-Type-Options nosniff;
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
@ -61,7 +61,7 @@ server {
fastcgi_param front_controller_active true;
fastcgi_send_timeout 1200;
fastcgi_read_timeout 1200;
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
fastcgi_pass unix:/run/php/php-fpm.sock;
fastcgi_intercept_errors on;
fastcgi_request_buffering off;
}

6
1/roles/nginx/files/sites-enabled/pma.conf
View File

@ -2,9 +2,9 @@ server {
listen 80;
listen 443 ssl http2;
server_name pma.xz777.ru;
ssl_certificate /etc/letsencrypt/live/pma.xz777.ru/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/pma.xz777.ru/privkey.pem; # managed by Certbot
server_name pma.{{domain}};
ssl_certificate /etc/letsencrypt/live/pma.{{domain}}/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/pma.{{domain}}/privkey.pem; # managed by Certbot
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;

6
1/roles/nginx/files/sites-enabled/root.conf
View File

@ -1,9 +1,9 @@
server {
listen 80;
listen 443 ssl http2;
server_name xz777.ru;
ssl_certificate /etc/letsencrypt/live/xz777.ru/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/xz777.ru/privkey.pem; # managed by Certbot
server_name {{domain}};
ssl_certificate /etc/letsencrypt/live/{{domain}}/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/{{domain}}/privkey.pem; # managed by Certbot
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";

6
1/roles/nginx/files/sites-enabled/wiki.conf
View File

@ -2,9 +2,9 @@ server {
listen 80;
listen 443 ssl http2;
server_name wiki.xz777.ru;
ssl_certificate /etc/letsencrypt/live/wiki.xz777.ru/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/wiki.xz777.ru/privkey.pem; # managed by Certbot
server_name wiki.{{domain}};
ssl_certificate /etc/letsencrypt/live/wiki.{{domain}}/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/wiki.{{domain}}/privkey.pem; # managed by Certbot
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;