freifunk/ansible-ffibk
9
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Role pdns-admin: make dns prefix configurable; add lets encrypt snippet to nginx template

Browse source
This commit is contained in:
Tobias Hachmer 2019-03-22 20:33:32 +01:00
parent 91e8a2ff3d
commit d194d6e936
No known key found for this signature in database
GPG key ID: E112788464CA5C60
2 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
inventory/host_vars/kichererbse.freifunk-mwu.de
View file

@ -4,3 +4,5 @@ server_type: "mesh-service"
magic: 67 magic: 67
nodejs_major_version: "10" nodejs_major_version: "10"
http_dns_prefix: "dns-int"

6
roles/pdns-admin/templates/pdns_admin.conf.j2
View file

@ -1,20 +1,22 @@
server { server {
listen 80; listen 80;
listen [::]:80; listen [::]:80;
server_name dns-int.{{ http_domain_external }} dns-int.{{ http_domain_internal }}; server_name {{ http_dns_prefix }}.{{ http_domain_external }} {{ http_dns_prefix }}.{{ http_domain_internal }};
return 301 https://$http_host$request_uri; return 301 https://$http_host$request_uri;
} }
server { server {
listen 443 ssl http2; listen 443 ssl http2;
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
server_name dns-int.{{ http_domain_external }} dns-int.{{ http_domain_internal }}; server_name {{ http_dns_prefix }}.{{ http_domain_external }} {{ http_dns_prefix }}.{{ http_domain_internal }};
index index.html index.htm; index index.html index.htm;
ssl_certificate /etc/nginx/ssl/{{ inventory_hostname_short }}.{{ http_domain_external }}/fullchain.pem; ssl_certificate /etc/nginx/ssl/{{ inventory_hostname_short }}.{{ http_domain_external }}/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/{{ inventory_hostname_short }}.{{ http_domain_external }}/privkey.pem; ssl_certificate_key /etc/nginx/ssl/{{ inventory_hostname_short }}.{{ http_domain_external }}/privkey.pem;
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
include /etc/nginx/snippets/letsencrypt-acme-challenge.conf;
client_max_body_size 10m; client_max_body_size 10m;
client_body_buffer_size 128k; client_body_buffer_size 128k;
proxy_redirect off; proxy_redirect off;