From 2e4d350c7f2b0db4c9b21b40dbfb057509907957 Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter
Date: Sat, 4 Feb 2023 11:47:09 +0100
Subject: Add web-proxy role

- web-proxy role to configure nginx
- pillar with common nginx configuration

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
---
 pillar/role/web-proxy.sls | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 pillar/role/web-proxy.sls

(limited to 'pillar')

diff --git a/pillar/role/web-proxy.sls b/pillar/role/web-proxy.sls
new file mode 100644
index 0000000..5913fa6
--- /dev/null
+++ b/pillar/role/web-proxy.sls
@@ -0,0 +1,21 @@
+{%- from slspath ~ '/../map.jinja' import listen_ips -%}
+
+nginx:
+  snippets:
+    robots:
+      - location /robots.txt:
+        - root: /srv/www/htdocs
+    php-fastcgi:
+      - 'location ~* \.php$':
+        - fastcgi_index: index.php
+        - fastcgi_pass: unix:/run/php-fpm/php-fpm.sock
+        - 'include': fastcgi_params
+        - fastcgi_param: SCRIPT_FILENAME $document_root$fastcgi_script_name
+    {%- if listen_ips | length %}
+    listen:
+      {%- for ip in listen_ips %}
+      - listen: {{ ip }}:443 ssl http2
+      {%- endfor %}
+    {%- endif %}
+
+
-- 
cgit v1.2.3