Skip to content

An Ansible role to install Nginx, with HTTPS support, and configure it for use with Girder.

License

Notifications You must be signed in to change notification settings

girder/ansible-role-girder-nginx

Repository files navigation

girder.nginx

Apache 2.0

An Ansible role to install Nginx, with HTTPS support, and configure it for use with Girder.

SSL/TLS certificates for HTTPS are provided via LetsEncrypt. This role ensures that certificates automatically renew and configures HTTPS to earn an A+ rating from SSL Labs Server Test.

Requirements

Ubuntu 18.04+.

The target must be reachable from the internet via the domain name nginx_hostname.

The target machine should also be able to initiate outgoing UDP connections from port 53 to the internet, for DNS resolution and OCSP stapling. Many firewalls (e.g. the AWS EC2 default security group) do not allow this by default.

Role Variables

parameter required default comments
nginx_hostname yes The hostname of the site. {{ inventory_hostname }} may provide this.
nginx_registration_email no [email protected] The email address to register with Let's Encrypt for expiration alerts.
nginx_girder_location no / The path from which Girder will be served.
nginx_extra_server_config no Any extra Nginx configuration to add to the server block for Girder.

Dependencies

This role does not have any formal dependencies, but is intended to be used in conjunction with the girder.girder role.

Example Playbook

A typical playbook using this role may look like:

- name: Deploy public-facing Girder
  hosts: all
  vars:
    ansible_python_interpreter: auto
  roles:
    - role: girder.mongodb
    - role: girder.girder
    - role: girder.nginx
      vars:
        nginx_hostname: data.girder.org

A typical Ansible Galaxy requirements.yml file should look like:

- src: girder.mongodb
  version: master
- src: girder.girder
  version: master
- src: girder.nginx
  version: master

License

Apache 2.0

About

An Ansible role to install Nginx, with HTTPS support, and configure it for use with Girder.

Resources

License

Stars

Watchers

Forks