group_vars/all

@@ -73,8 +73,3 @@ redirect_domain_mappings:
 - { source: "peertube.{{top_domain}}", target: "videos.{{top_domain}}" }
 - { source: "funkwhale.{{top_domain}}", target: "music.{{top_domain}}" }
 - { source: "pixelfed.{{top_domain}}", target: "pictures.{{top_domain}}" }
-
-nginx_configuration_directory:  "/etc/nginx/conf.d/"
-nginx_servers_directory:        "{{nginx_configuration_directory}}servers/"
-nginx_maps_directory:           "{{nginx_configuration_directory}}maps/"
-nginx_upstreams_directory:      "{{nginx_configuration_directory}}upstreams/"

playbook-common.yml

@@ -6,7 +6,7 @@
   tasks:
   roles:
     - role: update
-      when: execute_updates | bool
+      when: execute_updates | default(false) | bool
 
 - name: setup standard wireguard
   hosts: wireguard_server

playbook-servers.yml

@@ -187,7 +187,7 @@
   roles:
    -  role: docker-listmonk
       vars:
-        domain: "{{domain_listmonk}}"
+        domain: "{{domain_newsletter}}"
         http_port: 8019
 
 - name: setup discourse

roles/docker-attendize/tasks/main.yml

@@ -8,13 +8,13 @@
 - name: configure {{domain}}.conf
   template: 
     src: roles/nginx-docker-reverse-proxy/templates/domain.conf.j2 
-    dest: "{{nginx_servers_directory}}{{domain}}.conf"
+    dest: /etc/nginx/conf.d/{{domain}}.conf
   notify: restart nginx
 
 #- name: configure {{ mail_interface_domain }}.conf
 #  template: 
 #    src: roles/nginx-docker-reverse-proxy/templates/domain.conf.j2 
-#    dest: {{nginx_servers_directory}}{{ mail_interface_domain }}.conf
+#    dest: /etc/nginx/conf.d/{{ mail_interface_domain }}.conf
 #  vars:
 #    http_port: "{{ mail_interface_http_port }}"
 #    domain:    "{{ mail_interface_domain }}"

roles/docker-bigbluebutton/files/websocket_upgrade.conf

@@ -1,11 +0,0 @@
-# Context: https://chat.openai.com/share/9b3c0e79-15bc-4780-aa88-f0dd149bdaac
-
-map $http_upgrade $connection_upgrade {
-    default upgrade;
-    '' close;
-}
-
-map $remote_addr $endpoint_addr {
-    "~:"    [::1];
-    default    127.0.0.1;
-}

roles/docker-bigbluebutton/tasks/main.yml

@@ -3,15 +3,7 @@
   include_tasks: certbot-matomo.yml
 
 - name: configure {{domain}}.conf
-  template: 
-    src:  "nginx-proxy.conf.j2"
-    dest: "{{nginx_servers_directory}}{{domain}}.conf"
-  notify: restart nginx
-
-- name: configure websocket_upgrade.conf
-  copy: 
-    src:  "websocket_upgrade.conf"
-    dest: "{{nginx_maps_directory}}websocket_upgrade.conf"
+  template: src=templates/nginx-proxy.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
   notify: restart nginx
 
 - name: pull docker repository

roles/docker-bigbluebutton/templates/nginx-proxy.conf.j2

@@ -1,3 +1,12 @@
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    '' close;
+}
+map $remote_addr $endpoint_addr {
+    "~:"    [::1];
+    default    127.0.0.1;
+}
+
 server {
   listen 443 ssl http2 default_server;
   listen [::]:443 ssl http2 default_server;

roles/docker-mastodon/tasks/create-domains.yml

@@ -2,7 +2,5 @@
   include_tasks: certbot-matomo.yml
 
 - name: configure {{domain}}.conf
-  template: 
-    src:  "mastodon.conf.j2" 
-    dest: "{{nginx_servers_directory}}{{domain}}.conf"
+  template: src=templates/mastodon.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
   notify: restart nginx

roles/docker-mastodon/templates/mastodon.conf.j2

@@ -8,7 +8,7 @@ server {
 
   {% include 'roles/letsencrypt/templates/ssl_header.j2' %}
 
-  {% if nginx_matomo_tracking | bool %}
+  {% if nginx_matomo_tracking | default(False) %}
     {% include 'roles/nginx-matomo-tracking/templates/matomo-tracking.conf.j2' %}
   {% endif %}
 

roles/docker-mybb/vars/main.yml

@@ -2,5 +2,5 @@
 docker_compose_instance_directory: "{{path_docker_compose_instances}}mybb/"
 docker_compose_instance_confd_directory: "{{docker_compose_instance_directory}}conf.d/"
 docker_compose_instance_confd_defaultconf_file: "{{docker_compose_instance_confd_directory}}default.conf"
-target_mount_conf_d_directory: "{{nginx_servers_directory}}"
+target_mount_conf_d_directory: "/etc/nginx/conf.d/"
 source_domain: "mybb.{{top_domain}}"

roles/docker-nextcloud/tasks/main.yml

@@ -5,7 +5,7 @@
 - name: configure {{domain}}.conf
   template: 
     src:  "templates/nextcloud.conf.j2" 
-    dest: "{{nginx_servers_directory}}{{domain}}.conf"
+    dest: "/etc/nginx/conf.d/{{domain}}.conf"
   notify: restart nginx
 
 - name: "create {{path_docker_volumes}}nextcloud/"

roles/docker-nextcloud/templates/nextcloud.conf.j2

@@ -4,7 +4,7 @@ server
 
   {% include 'roles/letsencrypt/templates/ssl_header.j2' %}
 
-  {% if nginx_matomo_tracking | bool %}
+  {% if nginx_matomo_tracking | default(False) %}
     {% include 'roles/nginx-matomo-tracking/templates/matomo-tracking.conf.j2' %}
   {% endif %}
 

roles/docker-peertube/tasks/create-domains.yml

@@ -2,7 +2,5 @@
   include_tasks: certbot-matomo.yml
 
 - name: configure {{domain}}.conf
-  template: 
-    src:  "templates/peertube.conf.j2"
-    dest: "{{nginx_servers_directory}}{{domain}}.conf"
+  template: src=templates/peertube.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
   notify: restart nginx

roles/docker-peertube/templates/peertube.conf.j2

@@ -3,7 +3,7 @@ server {
 
   {% include 'roles/letsencrypt/templates/ssl_header.j2' %}
 
-  {% if nginx_matomo_tracking | bool %}
+  {% if nginx_matomo_tracking | default(False) %}
     {% include 'roles/nginx-matomo-tracking/templates/matomo-tracking.conf.j2' %}
   {% endif %}
 

roles/health-nginx/files/health-nginx.py

@@ -3,13 +3,8 @@ import requests
 import sys
 import re
 
-# Set up argument parser
-parser = argparse.ArgumentParser(description='Check if domains of nginx configuration files respond with the correct status code.')
-parser.add_argument('config_path', help='Path to the nginx configuration directory')
-args = parser.parse_args()
-
-# Use the provided argument for the config path
-config_path = args.config_path
+# Define the path to the nginx configuration directory
+config_path = '/etc/nginx/conf.d/'
 
 # Initialize the error counter
 error_counter = 0

roles/health-nginx/templates/health-nginx.service.j2

@@ -4,4 +4,4 @@ OnFailure=systemd-notifier@%n.service
 
 [Service]
 Type=oneshot
-ExecStart=/usr/bin/python3 {{ health_nginx_folder }}health-nginx.py {{nginx_servers_directory}}
+ExecStart=/usr/bin/python3 {{ health_nginx_folder }}health-nginx.py

roles/letsencrypt/tasks/main.yml

@@ -1,5 +1,5 @@
 - name: create nginx letsencrypt config file
-  template: src=letsencrypt.conf.j2 dest={{nginx_servers_directory}}letsencrypt.conf
+  template: src=letsencrypt.conf.j2 dest=/etc/nginx/conf.d/letsencrypt.conf
   notify: restart nginx
 
 - name: flush nginx service

roles/nginx-docker-reverse-proxy/templates/domain.conf.j2

@@ -3,7 +3,7 @@ server
   server_name {{domain}};
 
   # Include Matomo Tracking Code
-  {% if nginx_matomo_tracking | bool %}
+  {% if nginx_matomo_tracking | default(False) %}
     {% include 'roles/nginx-matomo-tracking/templates/matomo-tracking.conf.j2' %}
   {% endif %}
 

roles/nginx-domain-redirect/tasks/main.yml

@@ -7,6 +7,6 @@
   vars:
     domain: "{{item.source}}"
     target_domain: "{{item.target}}"
-  template: src=redirect.domain.nginx.conf.j2 dest={{nginx_servers_directory}}{{ domain }}.conf
+  template: src=redirect.domain.nginx.conf.j2 dest=/etc/nginx/conf.d/{{ domain }}.conf
   loop: "{{domain_mappings}}"
   notify: restart nginx

roles/nginx-homepage/tasks/main.yml

@@ -3,9 +3,7 @@
   include_tasks: certbot-matomo.yml
 
 - name: configure {{domain}}.conf
-  template: 
-    src:  "homepage.nginx.conf.j2" 
-    dest: "{{nginx_servers_directory}}{{domain}}.conf"
+  template: src=homepage.nginx.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
   notify: restart nginx
 
 - name: nginx-homepage repo git

roles/nginx-homepage/templates/homepage.nginx.conf.j2

@@ -5,7 +5,7 @@ server
   
   {% include 'roles/letsencrypt/templates/ssl_header.j2' %}
 
-  {% if nginx_matomo_tracking | bool %}
+  {% if nginx_matomo_tracking | default(False) %}
     {% include 'roles/nginx-matomo-tracking/templates/matomo-tracking.conf.j2' %}
   {% endif %}
 

roles/nginx-www-redirect/README.md

@@ -1,13 +1,13 @@
 # README.md for nginx-www-redirect Role
 
 ## Overview
-The `nginx-www-redirect` role is designed to automate the process of setting up redirects from `www.domain.tld` to `domain.tld` for all domains and subdomains configured within the `{{nginx_servers_directory}}` directory. This role dynamically identifies configuration files following the pattern `*domain.tld.conf` and creates corresponding redirection rules.
+The `nginx-www-redirect` role is designed to automate the process of setting up redirects from `www.domain.tld` to `domain.tld` for all domains and subdomains configured within the `/etc/nginx/conf.d/` directory. This role dynamically identifies configuration files following the pattern `*domain.tld.conf` and creates corresponding redirection rules.
 
 ## Role Description
 This role performs several key tasks:
-1. **Find Configuration Files**: Locates all `.conf` files in the `{{nginx_servers_directory}}` directory that match the `*.*.conf` pattern, ensuring that only domain and subdomain configurations are selected.
+1. **Find Configuration Files**: Locates all `.conf` files in the `/etc/nginx/conf.d/` directory that match the `*.*.conf` pattern, ensuring that only domain and subdomain configurations are selected.
    
-2. **Filter Domain Names**: Processes each configuration file, extracting the domain names and removing both the `.conf` extension and the `{{nginx_servers_directory}}` path.
+2. **Filter Domain Names**: Processes each configuration file, extracting the domain names and removing both the `.conf` extension and the `/etc/nginx/conf.d/` path.
 
 3. **Prepare Redirect Domain Mappings**: Transforms the filtered domain names into a source-target mapping format, where `source` is `www.domain.tld` and `target` is `domain.tld`.
 
@@ -25,7 +25,7 @@ Example playbook:
 
 ## Requirements
 - Ansible environment set up and configured to run roles.
-- Access to the `{{nginx_servers_directory}}` directory on the target hosts.
+- Access to the `/etc/nginx/conf.d/` directory on the target hosts.
 - The `nginx-domain-redirect` role must be present and properly configured to handle the redirection mappings.
 
 ## Notes

roles/nginx-www-redirect/tasks/main.yml

@@ -1,15 +1,15 @@
 ---
 - name: Find all .conf
   ansible.builtin.find:
-    paths: "{{nginx_servers_directory}}"
+    paths: "/etc/nginx/conf.d/"
     patterns: '*.*.conf'
   register: conf_files
 
 - name: Filter domain names and remove .conf extension and path
   set_fact:
-    filtered_domains: "{{ conf_files.files | map(attribute='path') | map('regex_search', domain_regex) | select('string') | map('regex_replace', '^{{nginx_servers_directory}}', '') | map('regex_replace', '.conf$', '') | list }}"
+    filtered_domains: "{{ conf_files.files | map(attribute='path') | map('regex_search', domain_regex) | select('string') | map('regex_replace', '^/etc/nginx/conf.d/', '') | map('regex_replace', '.conf$', '') | list }}"
   vars:
-    domain_regex: '^{{nginx_servers_directory}}(?!www\.)[^/]+\.conf$'
+    domain_regex: '^/etc/nginx/conf.d/(?!www\.)[^/]+\.conf$'
 
 - name: The domains for which a www. redirect will be implemented
   debug:

roles/nginx/tasks/main.yml

@@ -3,15 +3,11 @@
   pacman: name=nginx state=present
   notify: restart nginx
 
-- name: Ensure nginx configuration directories are present
+- name: set /etc/nginx/conf.d
   file:
-    path: "{{ item }}"
+    path: /etc/nginx/conf.d
     state: directory
-    mode: '0755'
-  loop:
-    - "{{nginx_servers_directory}}"
-    - "{{nginx_maps_directory}}"
-    - "{{nginx_upstreams_directory}}"
+    mode: 0755
 
 - name: create nginx config file
   template: src=nginx.conf.j2 dest=/etc/nginx/nginx.conf

roles/nginx/templates/nginx.conf.j2

@@ -31,7 +31,5 @@ http
   gzip_types application/atom+xml application/javascript application/xml+rss application/x-javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy text/javascript text/xml;
 
   types_hash_max_size 4096;
-  include {{nginx_upstreams_directory}}*.conf;
-  include {{nginx_maps_directory}}*.conf;
-  include {{nginx_servers_directory}}*.conf;
+  include conf.d/*.conf;
 }

tasks/create-domain-conf.yml

@@ -1,5 +1,5 @@
 - name: configure {{domain}}.conf
   template: 
     src:  "roles/nginx-docker-reverse-proxy/templates/domain.conf.j2" 
-    dest: "{{nginx_servers_directory}}{{domain}}.conf"
+    dest: "/etc/nginx/conf.d/{{domain}}.conf"
   notify: restart nginx

tasks/implement-matomo-tracking.yml

@@ -1,4 +1,4 @@
 - name: Activate NGINX matomo tracking
   include_role:
     name: nginx-matomo-tracking
-  when: nginx_matomo_tracking | bool and domain is defined
+  when: nginx_matomo_tracking and domain is defined