Saltstack Official Nginx Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

pillar.example 6.8KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170
  1. # nginx:
  2. install_from_source: True
  3. use_upstart: True
  4. use_sysvinit: False
  5. user_auth_enabled: True
  6. with_luajit: False
  7. with_openresty: True
  8. repo_version: development # Must be using ppa install by setting `repo_source = ppa`
  9. set_real_ips: # NOTE: to use this, nginx must have http_realip module enabled
  10. from_ips:
  11. - 10.10.10.0/24
  12. real_ip_header: X-Forwarded-For
  13. modules:
  14. headers-more:
  15. source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21
  16. source_hash: sha1=dbf914cbf3f7b6cb7e033fa7b7c49e2f8879113b
  17. # ========
  18. # nginx.ng
  19. # ========
  20. nginx:
  21. ng:
  22. # The following three `install_from_` options are mutually exclusive. If none is used, the distro's provided
  23. # package will be installed. If one of the `install_from` option is set to `True`, the state will
  24. # make sure the other two repos are removed.
  25. # Use the official's nginx repo binaries
  26. install_from_repo: false
  27. # Use Phusionpassenger's repo to install nginx and passenger binaries
  28. # Debian, Centos, Ubuntu and Redhat are currently available
  29. install_from_phusionpassenger: false
  30. # PPA install
  31. install_from_ppa: false
  32. # Set to 'stable', 'development' (mainline), 'community', or 'nightly' for each build accordingly ( https://launchpad.net/~nginx )
  33. ppa_version: 'stable'
  34. # Source install
  35. source_version: '1.10.0'
  36. source_hash: ''
  37. # These are usually set by grains in map.jinja
  38. # Typically you can comment these out.
  39. lookup:
  40. package: nginx-custom
  41. service: nginx
  42. webuser: www-data
  43. conf_file: /etc/nginx/nginx.conf
  44. server_available: /etc/nginx/sites-available
  45. server_enabled: /etc/nginx/sites-enabled
  46. server_use_symlink: True
  47. # This is required for RedHat like distros (Amazon Linux) that don't follow semantic versioning for $releasever
  48. rh_os_releasever: '6'
  49. # Currently it can be used on rhel/centos/suse when installing from repo
  50. gpg_check: True
  51. pid_file: /var/run/nginx.pid ### Prevent Rendering SLS error (map.jinja:149) if nginx.server.config.pid undefined (Ubuntu, etc) ###
  52. # Source compilation is not currently a part of nginx.ng
  53. from_source: False
  54. source:
  55. opts: {}
  56. package:
  57. opts: {} # this partially exposes parameters of pkg.installed
  58. service:
  59. enable: True # Whether or not the service will be enabled/running or dead
  60. opts: {} # this partially exposes parameters of service.running / service.dead
  61. server:
  62. opts: {} # this partially exposes file.managed parameters as they relate to the main nginx.conf file
  63. # nginx.conf (main server) declarations
  64. # dictionaries map to blocks {} and lists cause the same declaration to repeat with different values
  65. config:
  66. worker_processes: 4
  67. pid: /var/run/nginx.pid ### Directory location must exist
  68. events:
  69. worker_connections: 768
  70. http:
  71. sendfile: 'on'
  72. include:
  73. #### Note: Syntax issues in these files generate nginx [emerg] errors on startup. ####
  74. - /etc/nginx/mime.types
  75. - /etc/nginx/conf.d/*.conf
  76. - /etc/nginx/sites-enabled/*
  77. servers:
  78. disabled_postfix: .disabled # a postfix appended to files when doing non-symlink disabling
  79. symlink_opts: {} # partially exposes file.symlink params when symlinking enabled sites
  80. rename_opts: {} # partially exposes file.rename params when not symlinking disabled/enabled sites
  81. managed_opts: {} # partially exposes file.managed params for managed server files
  82. dir_opts: {} # partially exposes file.directory params for site available/enabled dirs
  83. # server declarations
  84. # servers will default to being placed in server_available
  85. managed:
  86. mysite: # relative pathname of the server file
  87. # may be True, False, or None where True is enabled, False, disabled, and None indicates no action
  88. enabled: True
  89. ###########
  90. ## Modify 'available_dir' AND 'enabled_dir' '/etc/nginx' location to alternative value.
  91. ###########
  92. available_dir: /etc/nginx/sites-available # an alternate directory (not sites-available) where this server may be found
  93. enabled_dir: /etc/nginx/sites-enabled # an alternate directory (not sites-enabled) where this server may be found
  94. disabled_name: mysite.aint_on # an alternative disabled name to be use when not symlinking
  95. overwrite: True # overwrite an existing server file or not
  96. # May be a list of config options or None, if None, no server file will be managed/templated
  97. # Take server directives as lists of dictionaries. If the dictionary value is another list of
  98. # dictionaries a block {} will be started with the dictionary key name
  99. config:
  100. - server:
  101. - server_name: localhost
  102. - listen:
  103. - 80
  104. - default_server
  105. - index:
  106. - index.html
  107. - index.htm
  108. - location ~ .htm:
  109. - try_files:
  110. - $uri
  111. - $uri/ =404
  112. - test: something else
  113. # The above outputs:
  114. # server {
  115. # server_name localhost;
  116. # listen 80 default_server;
  117. # index index.html index.htm;
  118. # location ~ .htm {
  119. # try_files $uri $uri/ =404;
  120. # test something else;
  121. # }
  122. # }
  123. certificates_path: '/etc/nginx/ssl' # Use this if you need to deploy below certificates in a custom path.
  124. # If you're doing SSL termination, you can deploy certificates this way.
  125. # The private one(s) should go in a separate pillar file not in version
  126. # control (or use encrypted pillar data).
  127. certificates:
  128. 'www.example.com':
  129. public_cert: |
  130. -----BEGIN CERTIFICATE-----
  131. (Your Primary SSL certificate: www.example.com.crt)
  132. -----END CERTIFICATE-----
  133. -----BEGIN CERTIFICATE-----
  134. (Your Intermediate certificate: ExampleCA.crt)
  135. -----END CERTIFICATE-----
  136. -----BEGIN CERTIFICATE-----
  137. (Your Root certificate: TrustedRoot.crt)
  138. -----END CERTIFICATE-----
  139. private_key: |
  140. -----BEGIN RSA PRIVATE KEY-----
  141. (Your Private Key: www.example.com.key)
  142. -----END RSA PRIVATE KEY-----
  143. # Passenger configuration
  144. # Default passenger configuration is provided, and will be deployed in
  145. # /etc/nginx/conf.d/passenger.conf
  146. passenger:
  147. passenger_root: /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini
  148. passenger_ruby: /usr/bin/ruby
  149. passenger_instance_registry_dir: /var/run/passenger-instreg