Stasiek Michalski 94158c
{% set websites = ['news', 'planet', 'search', 'yast'] %}
Christian Boltz fa04e8
Christian Boltz fa04e8
include:
Christian Boltz fa04e8
  - role.common.nginx
Christian Boltz fa04e8
Christian Boltz fa04e8
nginx:
Christian Boltz fa04e8
  ng:
Christian Boltz fa04e8
    servers:
Christian Boltz fa04e8
      managed:
Christian Boltz fa04e8
        {% for website in websites %}
Christian Boltz fa04e8
        {{ website }}.opensuse.org.conf:
Christian Boltz fa04e8
          config:
Christian Boltz fa04e8
            - map $sent_http_content_type $expires:
Christian Boltz fa04e8
                - text/css: 7d
Christian Boltz fa04e8
                - image/x-icon: 90d
Christian Boltz fa04e8
                - ~application/: 28d
Christian Boltz fa04e8
                - ~font/: 28d
Christian Boltz fa04e8
                - ~text/: 28d
Christian Boltz fa04e8
                - ~image/: 28d
Christian Boltz fa04e8
            - server:
Christian Boltz fa04e8
                - server_name: {{ website }}.opensuse.org
Christian Boltz fa04e8
                - listen:
Christian Boltz fa04e8
                    - 80
Christian Boltz fa04e8
                    {% if website == 'news' %}
Christian Boltz fa04e8
                    - default_server
Christian Boltz fa04e8
                    {% endif %}
Christian Boltz fa04e8
                - root: /srv/www/vhosts/{{ website }}.opensuse.org
Christian Boltz fa04e8
                - gzip_vary: 'on'
Christian Boltz fa04e8
                - gzip_min_length: 1000
Christian Boltz fa04e8
                - gzip_comp_level: 5
Christian Boltz fa04e8
                - gzip_types:
Christian Boltz fa04e8
                    - text/plain
Christian Boltz fa04e8
                    - text/xml text/x-js
Christian Boltz fa04e8
                    - application/json
Christian Boltz fa04e8
                    - text/css
Christian Boltz fa04e8
                    - application/x-javascript
Christian Boltz fa04e8
                    - application/javascript
Christian Boltz fa04e8
                - expires: $expires
Christian Boltz fa04e8
                - location /:
Christian Boltz fa04e8
                    - index:
Christian Boltz fa04e8
                        - index.html
Christian Boltz fa04e8
                        - index.htm
Christian Boltz fa04e8
                - location ~* \.(?:ttf|otf|eot|woff)$:
Christian Boltz fa04e8
                    - add_header: Access-Control-Allow-Origin "*"
Christian Boltz fa04e8
                - error_page: 405 = $uri
Christian Boltz fa04e8
                - error_page: 405 =200 $uri
Christian Boltz fa04e8
                - error_page: 500 502 503 504 /50x.html
Christian Boltz fa04e8
                - location = /50x.html:
Christian Boltz fa04e8
                    - root: /srv/www/htdocs
Christian Boltz fa04e8
                - access_log: /var/log/nginx/{{ website }}.access.log combined
Christian Boltz fa04e8
                - error_log: /var/log/nginx/{{ website }}.error.log
Christian Boltz fa04e8
          enabled: True
Christian Boltz fa04e8
        {% endfor %}
Stasiek Michalski 6ff891
Stasiek Michalski 6ff891
profile:
Stasiek Michalski 6ff891
  web_jekyll:
Stasiek Michalski 2291b6
    ssh_pubkey: 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINNg3043py2Oe/LfLU0+mE+ehe7gI3e2QajbSUI6p4Zm web_jekyll@salt'
Stasiek Michalski 6ff891
    websites: {{ websites }}