improve website collection

host_vars/web01.l3d.space.yml

@@ -31,6 +31,11 @@ nginx_sites:
   - name: 'www.c3woc.eu'
   - name: 'c3woc.cn'
   - name: 'www.c3woc.cn'
+  - name: 'l3d.space'
+  - name: 'www.l3d.space'
+  - name: 'ansible.l3d.space'
+  - name: 'www.ansible.l3d.space'
+
 
 acme_notification_email: "acme_{{ inventory_hostname }}@l3d.yt"
 

hosts.ini

@@ -1,2 +1,5 @@
 [web]
 web01.l3d.space
+
+[mail]
+mail01.l3d.space

site.yml

@@ -25,3 +25,9 @@
     - { role: acmetool2, tags: [web,acmetool]}
     - { role: nginx2, tags: [web,nginx]}
     - { role: goaccess, tags: [web,goaccess]}
+
+#- name: deploy mail config
+#  hosts: mail
+#  roles:
+#    - { role: postfix, tags: [mail,postfix]}
+#    - { role: dovecot, tags: [mail,dovecot]}

templates/files/nginx/sites/ansible.l3d.space_tls.conf

@@ -0,0 +1,14 @@
+server {
+        listen 443 ssl http2;
+        listen [::]:443 ssl http2;
+
+        server_name ansible.l3d.space;
+
+        include snippets/tls_parameters_{{ site.name }}.snippet.conf;
+        include snippets/tls_certificate_{{ site.name }}.snippet.conf;
+        include snippets/logging_{{ site.name }}.snippet.conf;
+
+        location / {
+                return 308 https://github.com/roles-ansible/;
+        }
+}

templates/files/nginx/sites/l3d.space_tls.conf

@@ -0,0 +1,14 @@
+server {
+        listen 443 ssl http2;
+        listen [::]:443 ssl http2;
+
+        server_name l3d.space;
+
+        include snippets/tls_parameters_{{ site.name }}.snippet.conf;
+        include snippets/tls_certificate_{{ site.name }}.snippet.conf;
+        include snippets/logging_{{ site.name }}.snippet.conf;
+
+        location / {
+                return 418;
+        }
+}

templates/files/nginx/sites/www.ansible.l3d.space_tls.conf

@@ -0,0 +1,14 @@
+server {
+        listen 443 ssl http2;
+        listen [::]:443 ssl http2;
+
+        server_name www.ansible.l3d.space;
+
+        include snippets/tls_parameters_{{ site.name }}.snippet.conf;
+        include snippets/tls_certificate_{{ site.name }}.snippet.conf;
+        include snippets/logging_{{ site.name }}.snippet.conf;
+
+        location / {
+                return 308 https://github.com/roles-ansible/;
+        }
+}

templates/files/nginx/sites/www.l3d.space_tls.conf

@@ -0,0 +1,14 @@
+server {
+        listen 443 ssl http2;
+        listen [::]:443 ssl http2;
+
+        server_name www.l3d.space;
+
+        include snippets/tls_parameters_{{ site.name }}.snippet.conf;
+        include snippets/tls_certificate_{{ site.name }}.snippet.conf;
+        include snippets/logging_{{ site.name }}.snippet.conf;
+
+        location / {
+                return 418;
+        }
+}