[ansible/artifactory] nginx installation options

[olwe0002]

Is this a request for help?:

---

Is this a BUG REPORT or FEATURE REQUEST? (choose one):

FEATURE_REQUEST

Currently both roles artifactory_nginx and artifactory_nginx_ssl are installing and configuring nginx.

The current installation has some downsides:

• it's installed with "state: present" and will end up in any old version of the package (e.g. "1.18.0" on Ubuntu 20.04), even that there are newer versions available.
• there is no possibility to define a version of the package (or a different package source)
• it's not possible to skip the nginx installation completely, in case that you did use a different role to install a custom/newer nginx but want to use artifactory_nginx_ssl to configure it

if you would split up installation and configuration, or at least make them both switchable via boolean variable, that would be great.

Which installer:

ansible

Which product and version (eg: ansible & collection version - 7.24.2):

collection latest version / master branch

Which operating system and version(eg: ubuntu & version - 20.4):

Ubuntu 20.04, but all are affected

Which product license (Enterprise/Pro):

Enterprise

[bbaassssiiee]

I guess you can roll your own Nginx when you set these, but I didn't test it.

artifactory_nginx_enabled: false
artifactory_nginx_ssl_enabled: false

[bbaassssiiee]

In production environments, you should set state to present and specify a target version to ensure that packages are installed to a planned and tested version.

Setting state to latest not only installs software, it performs an update and installs additional packages. This can result in performance degradation or loss of service. If you do want to update packages to the latest version, you should also set the update_only or only_upgrade parameter to true based on package manager to avoid installing additional packages.

Installing Artifactory on-premises is a bit hard given the requirements of the postgres and nginx roles in the JFrog platform collection. These rely on postgresql.org and nginx.org, which in our case would need to be allowed in our proxy. Recent versions of RHEL/Rocky/AlmaLinux have NGinx and Postgresql in their appstream, you only need to enable them.

Nginx
https://access.redhat.com/solutions/6149242

[bbaassssiiee]

Proxy allow list

• galaxy.ansible.com
• ansible-galaxy-ng.s3.dualstack.us-east-1.amazonaws.com
• nginx.org
• download.postgresql.org
• releases.jfrog.io
• releases-cdn.jfrog.io