salt
/
nginx-formula
bifurqué depuis ExternalMirrors/nginx-formula
Suivre 1
Ajouter aux favoris 0
Bifurcation 0
Code Versions 0 Activité
Saltstack Official Nginx Formula
Vous ne pouvez pas sélectionner plus de 25 sujets Les noms de sujets doivent commencer par une lettre ou un nombre, peuvent contenir des tirets ('-') et peuvent comporter jusqu'à 35 caractères.
294 Révisions
2 Branches
Aborescence: f16d800c83
Branches Tags
${ item.name }
Créer la branche ${ searchTerm }
de 'f16d800c83'
${ noResults }
nginx-formula/pillar.example

215 lines
8.7KB
Brut Annotations Historique 

  1. # nginx:

  2.    install_from_source: True

  3.    use_upstart: True

  4.    use_sysvinit: False

  5.    user_auth_enabled: True

  6.    with_luajit: False

  7.    with_openresty: True

  8.    repo_version: development  # Must be using ppa install by setting `repo_source = ppa`

  9.    set_real_ips: # NOTE: to use this, nginx must have http_realip module enabled

  10.      from_ips:

  11.        - 10.10.10.0/24

  12.      real_ip_header: X-Forwarded-For

  13.    modules:

  14.      headers-more:

  15.        source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21

  16.        source_hash: sha1=dbf914cbf3f7b6cb7e033fa7b7c49e2f8879113b

  17. 

  18. # ========

  19. # nginx.ng

  20. # ========

  21. 

  22. nginx:

  23.   ng:

  24.     # The following three `install_from_` options are mutually exclusive. If none is used, the distro's provided

  25.     # package will be installed. If one of the `install_from` option is set to `True`, the state will

  26.     # make sure the other two repos are removed.

  27. 

  28.     # Use the official's nginx repo binaries

  29.     install_from_repo: false

  30. 

  31.     # Use Phusionpassenger's repo to install nginx and passenger binaries

  32.     # Debian, Centos, Ubuntu and Redhat are currently available

  33.     install_from_phusionpassenger: false

  34. 

  35.     # PPA install

  36.     install_from_ppa: false

  37.     # Set to 'stable', 'development' (mainline), 'community', or 'nightly' for each build accordingly ( https://launchpad.net/~nginx )

  38.     ppa_version: 'stable'

  39. 

  40.     # Source install

  41.     source_version: '1.10.0'

  42.     source_hash: ''

  43. 

  44.     # These are usually set by grains in map.jinja

  45.     # Typically you can comment these out.

  46.     lookup:

  47.       package: nginx-custom

  48.       service: nginx

  49.       webuser: www-data

  50.       conf_file: /etc/nginx/nginx.conf

  51.       server_available: /etc/nginx/sites-available

  52.       server_enabled: /etc/nginx/sites-enabled

  53.       server_use_symlink: True

  54.       # If you install nginx+passenger from phusionpassenger in Debian, these values will probably be needed

  55.       passenger_package: libnginx-mod-http-passenger

  56.       passenger_config_file: /etc/nginx/conf.d/mod-http-passenger.conf

  57. 

  58.       # This is required for RedHat like distros (Amazon Linux) that don't follow semantic versioning for $releasever

  59.       rh_os_releasever: '6'

  60.       # Currently it can be used on rhel/centos/suse when installing from repo

  61.       gpg_check: True

  62.       pid_file: /var/run/nginx.pid   ### Prevent Rendering SLS error (map.jinja:149) if nginx.server.config.pid undefined (Ubuntu, etc) ###

  63. 

  64. 

  65.     # Source compilation is not currently a part of nginx.ng

  66.     from_source: False

  67. 

  68.     source:

  69.       opts: {}

  70. 

  71.     package:

  72.       opts: {} # this partially exposes parameters of pkg.installed

  73. 

  74.     service:

  75.       enable: True # Whether or not the service will be enabled/running or dead

  76.       opts: {} # this partially exposes parameters of service.running / service.dead

  77. 

  78.     server:

  79.       opts: {} # this partially exposes file.managed parameters as they relate to the main nginx.conf file

  80. 

  81.       # nginx.conf (main server) declarations

  82.       # dictionaries map to blocks {} and lists cause the same declaration to repeat with different values

  83.       config:

  84.         source_path: salt://path_to_nginx_conf_file/nginx.conf # IMPORTANT: This option is mutually exclusive with the rest of the

  85.                                                           # options; if it is found other options (worker_processes: 4 and so

  86.                                                           # on) are not processed and just upload the file from source

  87.         worker_processes: 4

  88.         pid: /var/run/nginx.pid		### Directory location must exist

  89.         events:

  90.           worker_connections: 768

  91.         http:

  92.           sendfile: 'on'

  93.           include:

  94.             #### Note: Syntax issues in these files generate nginx [emerg] errors on startup.  ####

  95.             - /etc/nginx/mime.types

  96.             - /etc/nginx/conf.d/*.conf

  97.             - /etc/nginx/sites-enabled/*

  98. 

  99.     servers:

  100.       disabled_postfix: .disabled # a postfix appended to files when doing non-symlink disabling

  101.       symlink_opts: {} # partially exposes file.symlink params when symlinking enabled sites

  102.       rename_opts: {} # partially exposes file.rename params when not symlinking disabled/enabled sites

  103.       managed_opts: {} # partially exposes file.managed params for managed server files

  104.       dir_opts: {} # partially exposes file.directory params for site available/enabled dirs

  105. 

  106.       # server declarations

  107.       # servers will default to being placed in server_available

  108.       managed:

  109.         mysite: # relative pathname of the server file

  110.           # may be True, False, or None where True is enabled, False, disabled, and None indicates no action

  111.           enabled: True

  112.           # Remove the site config file. Nice to clean up the conf.d (or sites-available).

  113.           # It also remove the symlink (if it is exists).

  114.           # The site MUST be disabled before delete it (if not the nginx is not reloaded).

  115.           deleted: True

  116.           ###########

  117.           ## Modify  'available_dir' AND 'enabled_dir' '/etc/nginx' location to alternative value.

  118.           ###########

  119.           available_dir: /etc/nginx/sites-available # an alternate directory (not sites-available) where this server may be found

  120.           enabled_dir: /etc/nginx/sites-enabled # an alternate directory (not sites-enabled) where this server may be found

  121.           disabled_name: mysite.aint_on # an alternative disabled name to be use when not symlinking

  122.           overwrite: True # overwrite an existing server file or not

  123. 

  124.           # May be a list of config options or None, if None, no server file will be managed/templated

  125.           # Take server directives as lists of dictionaries. If the dictionary value is another list of

  126.           # dictionaries a block {} will be started with the dictionary key name

  127.           config:

  128.             - server:

  129.               - server_name: localhost

  130.               - listen:

  131.                 - 80

  132.                 - default_server

  133.               - index:

  134.                 - index.html

  135.                 - index.htm

  136.               - location ~ .htm:

  137.                 - try_files:

  138.                   - $uri

  139.                   - $uri/ =404

  140.                 - test: something else

  141. 

  142.           # The above outputs:

  143.           # server {

  144.           #    server_name localhost;

  145.           #    listen 80 default_server;

  146.           #    index index.html index.htm;

  147.           #    location ~ .htm {

  148.           #        try_files $uri $uri/ =404;

  149.           #        test something else;

  150.           #    }

  151.           # }

  152.         mysite2: # Using source_path options to upload the file instead of templating all the file

  153.           enabled: True

  154.           available_dir: /etc/nginx/sites-available

  155.           enabled_dir: /etc/nginx/sites-enabled

  156.           config:

  157.             source_path: salt://path-to-site-file/mysite2

  158. 

  159.         # Below configuration becomes handy if you want to create custom configuration files

  160.         # for example if you want to create /usr/local/etc/nginx/http_options.conf with

  161.         # the following content:

  162. 

  163.         # sendfile on;

  164.         # tcp_nopush on;

  165.         # tcp_nodelay on;

  166.         # send_iowait 12000;

  167. 

  168.         http_options.conf:

  169.           enabled: True

  170.           available_dir: /usr/local/etc/nginx

  171.           enabled_dir: /usr/local/etc/nginx

  172.           config:

  173.             - sendfile: 'on'

  174.             - tcp_nopush: 'on'

  175.             - tcp_nodelay: 'on'

  176.             - send_iowait: 12000

  177. 

  178.     certificates_path: '/etc/nginx/ssl'  # Use this if you need to deploy below certificates in a custom path.

  179.     # If you're doing SSL termination, you can deploy certificates this way.

  180.     # The private one(s) should go in a separate pillar file not in version

  181.     # control (or use encrypted pillar data).

  182.     certificates:

  183.       'www.example.com':

  184.         public_cert: |

  185.           -----BEGIN CERTIFICATE-----

  186.           (Your Primary SSL certificate: www.example.com.crt)

  187.           -----END CERTIFICATE-----

  188.           -----BEGIN CERTIFICATE-----

  189.           (Your Intermediate certificate: ExampleCA.crt)

  190.           -----END CERTIFICATE-----

  191.           -----BEGIN CERTIFICATE-----

  192.           (Your Root certificate: TrustedRoot.crt)

  193.           -----END CERTIFICATE-----

  194.         private_key: |

  195.           -----BEGIN RSA PRIVATE KEY-----

  196.           (Your Private Key: www.example.com.key)

  197.           -----END RSA PRIVATE KEY-----

  198. 

  199.     dh_param:

  200.       'mydhparam1.pem': |

  201.         -----BEGIN DH PARAMETERS-----

  202.         (Your custom DH prime)

  203.         -----END DH PARAMETERS-----

  204.       # or to generate one on-the-fly

  205.       'mydhparam2.pem':

  206.         keysize: 2048

  207. 

  208.     # Passenger configuration

  209.     # Default passenger configuration is provided, and will be deployed in

  210.     # /etc/nginx/conf.d/passenger.conf

  211.     passenger:

  212.       passenger_root: /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini

  213.       passenger_ruby: /usr/bin/ruby

  214.       passenger_instance_registry_dir: /var/run/passenger-instreg