-
- install_from_source: True
- use_upstart: True
- use_sysvinit: False
- user_auth_enabled: True
- with_luajit: False
- with_openresty: True
- repo_version: development
- set_real_ips:
- from_ips:
- - 10.10.10.0/24
- real_ip_header: X-Forwarded-For
- modules:
- headers-more:
- source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21
- source_hash: sha1=dbf914cbf3f7b6cb7e033fa7b7c49e2f8879113b
-
-
-
-
-
- nginx:
- ng:
-
-
-
-
-
- install_from_repo: false
-
-
-
- install_from_phusionpassenger: false
-
-
- install_from_ppa: false
-
- ppa_version: 'stable'
-
-
- source_version: '1.10.0'
- source_hash: ''
-
-
-
- lookup:
- package: nginx-custom (can be a list)
- service: nginx
- webuser: www-data
- conf_file: /etc/nginx/nginx.conf
- server_available: /etc/nginx/sites-available
- server_enabled: /etc/nginx/sites-enabled
- server_use_symlink: True
-
- passenger_package: libnginx-mod-http-passenger
- passenger_config_file: /etc/nginx/conf.d/mod-http-passenger.conf
-
-
- rh_os_releasever: '6'
-
- gpg_check: True
- pid_file: /var/run/nginx.pid
-
-
-
- from_source: False
-
- source:
- opts: {}
-
- package:
- opts: {}
-
- service:
- enable: True
- opts: {}
-
- snippets:
- letsencrypt:
- - location ^~ /.well-known/acme-challenge/:
- - proxy_pass: http://localhost:9999
-
- server:
- opts: {}
-
-
-
-
- config:
- source_path: salt://path_to_nginx_conf_file/nginx.conf
-
-
- worker_processes: 4
- load_module: modules/ngx_http_lua_module.so
- pid: /var/run/nginx.pid
- events:
- worker_connections: 768
- http:
- sendfile: 'on'
- include:
-
- - /etc/nginx/mime.types
- - /etc/nginx/conf.d/*.conf
- - /etc/nginx/sites-enabled/*
-
-
- log_format: |-
- main '...';
- access_log /var/log/nginx/access_log main
- access_log: []
-
-
- stream:
- upstream lb-1000:
- - server:
- - hostname1.example.com:1000
- - hostname2.example.com:1000
- server:
- listen: 1000
- proxy_pass: lb-1000
-
-
- servers:
- disabled_postfix: .disabled
- symlink_opts: {}
- rename_opts: {}
- managed_opts: {}
- dir_opts: {}
-
-
-
- managed:
- mysite:
-
- enabled: True
-
-
-
- deleted: True
-
-
-
- available_dir: /etc/nginx/sites-available
- enabled_dir: /etc/nginx/sites-enabled
- disabled_name: mysite.aint_on
- overwrite: True
-
-
-
-
- config:
- - server:
- - server_name: localhost
- - listen:
- - 80
- - default_server
- - index:
- - index.html
- - index.htm
- - location ~ .htm:
- - try_files:
- - $uri
- - $uri/ =404
- - test: something else
- - include 'snippets/letsencrypt.conf'
-
-
-
-
-
-
-
-
-
-
-
- mysite2:
- enabled: True
- available_dir: /etc/nginx/sites-available
- enabled_dir: /etc/nginx/sites-enabled
- config:
- source_path: salt://path-to-site-file/mysite2
-
-
-
-
-
-
-
-
-
-
- http_options.conf:
- enabled: True
- available_dir: /usr/local/etc/nginx
- enabled_dir: /usr/local/etc/nginx
- config:
- - sendfile: 'on'
- - tcp_nopush: 'on'
- - tcp_nodelay: 'on'
- - send_iowait: 12000
-
- certificates_path: '/etc/nginx/ssl'
-
-
-
- certificates:
- 'www.example.com':
-
-
-
-
-
- public_cert: |
- -----BEGIN CERTIFICATE-----
- (Your Primary SSL certificate: www.example.com.crt)
- -----END CERTIFICATE-----
- -----BEGIN CERTIFICATE-----
- (Your Intermediate certificate: ExampleCA.crt)
- -----END CERTIFICATE-----
- -----BEGIN CERTIFICATE-----
- (Your Root certificate: TrustedRoot.crt)
- -----END CERTIFICATE-----
- private_key: |
- -----BEGIN RSA PRIVATE KEY-----
- (Your Private Key: www.example.com.key)
- -----END RSA PRIVATE KEY-----
-
- dh_param:
- 'mydhparam1.pem': |
- -----BEGIN DH PARAMETERS-----
- (Your custom DH prime)
- -----END DH PARAMETERS-----
- # or to generate one on-the-fly
- 'mydhparam2.pem':
- keysize: 2048
-
-
-
-
- passenger:
- passenger_root: /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini
- passenger_ruby: /usr/bin/ruby
- passenger_instance_registry_dir: /var/run/passenger-instreg
|