o Adding rosin and numquam.

o Adding unattended-upgrades.

1 files changed, 31 insertions, 0 deletions

diff --git a/ansible/roles/rosin/tasks/nginx.yml b/ansible/roles/rosin/tasks/nginx.yml
new file mode 100644
index 0000000..8ef9145
--- /dev/null
+++ b/ansible/roles/rosin/tasks/nginx.yml
@@ -0,0 +1,31 @@
+---
+- name: Packages for nginx
+  apt:
+    name: "{{ item }}"
+    install_recommends: no
+  with_items:
+    - nginx
+    - certbot
+    - python3-certbot-nginx
+
+- name: no default nginx site
+  notify: reload nginx
+  file:
+    path: /etc/nginx/sites-enabled/default
+    state: absent
+
+- name: nginx config
+  notify: reload nginx
+  template:
+    dest: "/etc/nginx/sites-enabled/rosin.trygvis.io"
+    src: etc/nginx/sites-enabled/rosin.j2
+
+- name: docroot dir
+  file:
+    path: "/var/www/rosin"
+    state: directory
+
+#- name: docroot dir
+#  copy:
+#    dest: "/var/www/rosin/index.html"
+#    src: "docroot/index.html"