|
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108 |
- nginx:
- install_from_source: True
- use_upstart: True
- use_sysvinit: False
- user_auth_enabled: True
- with_luajit: False
- with_openresty: True
- repo_version: development # Must be using ppa install by setting `repo_source = ppa`
- set_real_ips: # NOTE: to use this, nginx must have http_realip module enabled
- from_ips:
- - 10.10.10.0/24
- real_ip_header: X-Forwarded-For
- modules:
- headers-more:
- source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21
- source_hash: sha1=dbf914cbf3f7b6cb7e033fa7b7c49e2f8879113b
-
- # ========
- # nginx.ng
- # ========
-
- nginx:
- ng:
- # PPA installing
- install_from_ppa: True
- # Set to 'mainline' for edge nginx builds
- ppa_version: 'stable'
-
- # These are usually set by grains in map.jinja
- lookup:
- package: nginx-custom
- service: nginx
- webuser: www-data
- conf_file: /etc/nginx/nginx.conf
- vhost_available: /etc/nginx/sites-available
- vhost_enabled: /etc/nginx/sites-enabled
- vhost_use_symlink: True
-
- # Source compilation is not currently a part of nginx.ng
- from_source: False
-
- package:
- opts: {} # this partially exposes parameters of pkg.installed
-
- service:
- enable: True # Whether or not the service will be enabled/running or dead
- opts: {} # this partially exposes parameters of service.running / service.dead
-
- server:
- opts: {} # this partially exposes file.managed parameters as they relate to the main nginx.conf file
-
- # nginx.conf (main server) declarations
- # dictionaries map to blocks {} and lists cause the same declaration to repeat with different values
- config:
- worker_processes: 4
- pid: /run/nginx.pid
- events:
- worker_connections: 768
- http:
- sendfile: 'on'
- include:
- - /etc/nginx/mime.types
- - /etc/nginx/conf.d/*.conf
-
- vhosts:
- disabled_postfix: .disabled # a postfix appended to files when doing non-symlink disabling
- symlink_opts: {} # partially exposes file.symlink params when symlinking enabled sites
- rename_opts: {} # partially exposes file.rename params when not symlinking disabled/enabled sites
- managed_opts: {} # partially exposes file.managed params for managed vhost files
- dir_opts: {} # partially exposes file.directory params for site available/enabled dirs
-
- # vhost declarations
- # vhosts will default to being placed in vhost_available
- managed:
- mysite: # relative pathname of the vhost file
- # may be True, False, or None where True is enabled, False, disabled, and None indicates no action
- dir: /tmp # an alternate directory (not sites-available) where this vhost may be found
- disabled_name: mysite.aint_on # an alternative disabled name to be use when not symlinking
- enabled: True
-
- # May be a list of config options or None, if None, no vhost file will be managed/templated
- # Take server directives as lists of dictionaries. If the dictionary value is another list of
- # dictionaries a block {} will be started with the dictionary key name
- config:
- - server:
- - server_name: localhost
- - listen:
- - 80
- - default_server
- - index:
- - index.html
- - index.htm
- - location ~ .htm:
- - try_files:
- - $uri
- - $uri/ =404
- - test: something else
-
- # The above outputs:
- # server {
- # server_name localhost;
- # listen 80 default_server;
- # index index.html index.htm;
- # location ~ .htm {
- # try_files $uri $uri/ =404;
- # test something else;
- # }
- # }
|