lulzette/ansible-pet
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

templates

Browse Source
This commit is contained in:
lulzette 2021-02-25 18:02:15 +03:00
parent ce1ba77ad8
commit 7b6e82b702
5 changed files with 15 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
1/play.yml
View File

@ -3,4 +3,5 @@
roles: roles:
- nginx - nginx
- php - php
- mysql - mysql
- webapps

8
1/roles/nginx/files/sites-enabled/cloud.conf
View File

@ -1,10 +1,10 @@
server { server {
listen 80; listen 80;
listen 443 ssl http2; listen 443 ssl http2;
server_name cloud.xz777.ru; server_name cloud.{{domain}};
index index.php; index index.php;
ssl_certificate /etc/letsencrypt/live/cloud.xz777.ru/fullchain.pem; # managed by Certbot ssl_certificate /etc/letsencrypt/live/cloud.{{domain}}/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/cloud.xz777.ru/privkey.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/cloud.{{domain}}/privkey.pem; # managed by Certbot
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;"; add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
@ -61,7 +61,7 @@ server {
fastcgi_param front_controller_active true; fastcgi_param front_controller_active true;
fastcgi_send_timeout 1200; fastcgi_send_timeout 1200;
fastcgi_read_timeout 1200; fastcgi_read_timeout 1200;
fastcgi_pass unix:/run/php/php7.4-fpm.sock; fastcgi_pass unix:/run/php/php-fpm.sock;
fastcgi_intercept_errors on; fastcgi_intercept_errors on;
fastcgi_request_buffering off; fastcgi_request_buffering off;
} }

6
1/roles/nginx/files/sites-enabled/pma.conf
View File

@ -2,9 +2,9 @@ server {
listen 80; listen 80;
listen 443 ssl http2; listen 443 ssl http2;
server_name pma.xz777.ru; server_name pma.{{domain}};
ssl_certificate /etc/letsencrypt/live/pma.xz777.ru/fullchain.pem; # managed by Certbot ssl_certificate /etc/letsencrypt/live/pma.{{domain}}/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/pma.xz777.ru/privkey.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/pma.{{domain}}/privkey.pem; # managed by Certbot
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;"; add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;

6
1/roles/nginx/files/sites-enabled/root.conf
View File

@ -1,9 +1,9 @@
server { server {
listen 80; listen 80;
listen 443 ssl http2; listen 443 ssl http2;
server_name xz777.ru; server_name {{domain}};
ssl_certificate /etc/letsencrypt/live/xz777.ru/fullchain.pem; # managed by Certbot ssl_certificate /etc/letsencrypt/live/{{domain}}/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/xz777.ru/privkey.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/{{domain}}/privkey.pem; # managed by Certbot
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;"; add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block"; add_header X-XSS-Protection "1; mode=block";

6
1/roles/nginx/files/sites-enabled/wiki.conf
View File

@ -2,9 +2,9 @@ server {
listen 80; listen 80;
listen 443 ssl http2; listen 443 ssl http2;
server_name wiki.xz777.ru; server_name wiki.{{domain}};
ssl_certificate /etc/letsencrypt/live/wiki.xz777.ru/fullchain.pem; # managed by Certbot ssl_certificate /etc/letsencrypt/live/wiki.{{domain}}/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/wiki.xz777.ru/privkey.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/wiki.{{domain}}/privkey.pem; # managed by Certbot
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;"; add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;