main.yml

---
nginx_conf_dir: /etc/nginx
nginx_data_dir: /var/www

nginx_metrics: True
# port on which nginx will server it status page
nginx_status_port: 8060

nginx_events_params:
  - worker_connections 768

nginx_http_params:
  - sendfile "on"
  - tcp_nopush "on"
  - tcp_nodelay "on"
  - keepalive_timeout "65"
  - access_log /var/log/nginx/access.log
  - error_log /var/log/nginx/error.log error
  - server_tokens off
  - types_hash_max_size 2048
  - client_max_body_size 0
  - gzip off

nginx_custom_errorfiles: True
nginx_remove_configs: []

nginx_ssl_enable: True
nginx_dh_bits: 2048
#nginx_dh_bits: 4096
nginx_letsencrypt_email: "" # Setting email enables letsencrypt automated certificates

nginx_basic_auth_user: ""
nginx_basic_auth_pass: ""

nginx_remove_sites: []
nginx_sites:
  example: |
    upstream app {
      server 0.0.0.0:8080;
    }
    server {
      listen 80 default_server;
      listen [::]:80 default_server;
      server_name {{ ansible_fqdn }};
      include snippets/letsencrypt.conf;
      include snippets/errors.conf;
      location / {
        return 301 https://$server_name$request_uri;
      }
    }
#    server {
#      listen 443 ssl default_server;
#      server_name {{ ansible_fqdn }};
#      ssl_certificate /etc/letsencrypt/live/{{ ansible_fqdn }}/fullchain.pem;
#      ssl_certificate_key /etc/letsencrypt/live/{{ ansible_fqdn }}/privkey.pem;
#      include snippets/errors.conf;
#      location /app/ {
#        proxy_pass http://app;
#        include snippets/proxy.conf;
#      }
#    }