Very basic nginx installation with best practices concerning SSL/TLS and global Let's Encrypt, doesn't manage certs and vhosts therefore see certbot and nginx role.
See the full example for a complete playbook.
- use pregenerated dhparams https://wiki.mozilla.org/Security/Server_Side_TLS#Pre-defined_DHE_groups
None.
- hosts: all
become: yes
roles:
- nginx
None of the variables below are required.
Variable | Default | Comment |
---|
For all options see defaults/main.yml
You can use the Vagrantfile for local testing, just install vagrant and virtualbox and execute the following commands:
vagrant up
vagrant provision
MIT