[nginx] Drop role nginx-mailman

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
certbot_on_virtu
Yohann D'ANELLO 2021-01-02 17:16:04 +01:00 committed by ynerant
parent dafa3685ce
commit ec262bd5c1
5 changed files with 1 additions and 123 deletions

View File

@ -20,12 +20,11 @@
nginx:
ssl:
cert: /etc/letsencrypt/live/crans.org/fullchain.pem
key: /etc/letsencrypt/live/crans.org/privkey.pem
cert_key: /etc/letsencrypt/live/crans.org/privkey.pem
trusted_cert: /etc/letsencrypt/live/crans.org/chain.pem
roles:
- mailman
- nginx
- nginx-mailman
# Deploy Mailman3
- hosts: mailman.adm.crans.org

View File

@ -1,5 +0,0 @@
---
- name: Reload nginx
systemd:
name: nginx
state: reloaded

View File

@ -1,20 +0,0 @@
---
- name: Copy configuration files
template:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
loop:
- src: nginx/snippets/fastcgi-mailman.conf.j2
dest: /etc/nginx/snippets/fastcgi-mailman.conf
- src: var/www/custom_401.html.j2
dest: /var/www/custom_401.html
notify: Reload nginx
- name: Enable mailman
file:
src: /etc/nginx/sites-available/mailman
dest: /etc/nginx/sites-enabled/mailman
state: link
force: true
when: not ansible_check_mode
notify: Reload nginx

View File

@ -1,2 +0,0 @@
{{ ansible_header | comment }}
Stop:$apr1$NXaV5H7Q$J3ora3Jo5h775Y1nm93PN1

View File

@ -1,94 +0,0 @@
{{ ansible_header | comment }}
server {
listen 80 default;
listen [::]:80 default;
server_name _;
location / {
return 302 https://{{ mailman.default_host }}$request_uri;
}
}
# Redirect everybody to mailing lists
server {
listen 443 default_server ssl;
listen [::]:443 default_server ssl;
server_name _;
include "/etc/nginx/snippets/options-ssl.conf";
location / {
return 302 https://{{ mailman.default_host }}$request_uri;
}
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name {{ mailman.default_host }};
include "/etc/nginx/snippets/options-ssl.conf";
root /usr/lib/cgi-bin/mailman/;
index index.htm index.html;
location /error/ {
internal;
alias /var/www/;
}
location /create {
default_type text/html;
alias /etc/mailman/create.html;
}
location ~ ^/$ {
return 302 https://{{ mailman.default_host }}/listinfo;
}
location / {
include "/etc/nginx/snippets/fastcgi-mailman.conf";
}
location ~ ^/listinfo {
satisfy any;
include "/etc/nginx/snippets/fastcgi-mailman.conf";
{% for net in mynetworks -%}
allow {{ net }};
{% endfor -%}
deny all;
auth_basic {{ mailman.auth_basic }}
auth_basic_user_file /etc/nginx/mailman_passwd;
error_page 401 /error/custom_401.html;
}
location ~ ^/admin {
satisfy any;
include "/etc/nginx/snippets/fastcgi-mailman.conf";
{% for net in mynetworks -%}
allow {{ net }};
{% endfor -%}
deny all;
auth_basic {{ mailman.auth_basic }}
auth_basic_user_file /etc/nginx/mailman_passwd;
error_page 401 /error/custom_401.html;
}
location /images/mailman { alias /usr/share/images/mailman;}
location /robots.txt { alias /var/www/robots.txt;}
location /archives {
alias /var/lib/mailman/archives/public;
autoindex on;
}
}