101 lines
		
	
	
		
			3.6 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			101 lines
		
	
	
		
			3.6 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
nginx:
 | 
						|
  install_from_source: True
 | 
						|
  use_upstart: True
 | 
						|
  with_luajit: False
 | 
						|
  with_openresty: True
 | 
						|
  set_real_ips: # NOTE: to use this, nginx must have http_realip module enabled
 | 
						|
    ips:
 | 
						|
      - 10.10.10.0/24
 | 
						|
    real_ip_header: X-Forwarded-For
 | 
						|
  modules:
 | 
						|
    headers-more:
 | 
						|
      source: http://github.com/agentzh/headers-more-nginx-module/tarball/v0.21
 | 
						|
      source_hash: sha1=dbf914cbf3f7b6cb7e033fa7b7c49e2f8879113b
 | 
						|
 | 
						|
# ========
 | 
						|
# nginx.ng
 | 
						|
# ========
 | 
						|
 | 
						|
nginx:
 | 
						|
  ng:
 | 
						|
    # These are usually set by grains in map.jinja
 | 
						|
    lookup:
 | 
						|
      package: nginx-custom
 | 
						|
      service: nginx
 | 
						|
      webuser: www-data
 | 
						|
      conf_file: /etc/nginx/nginx.conf
 | 
						|
      vhost_available: /etc/nginx/sites-available
 | 
						|
      vhost_enabled: /etc/nginx/sites-enabled
 | 
						|
      vhost_use_symlink: True
 | 
						|
 | 
						|
    # Source compilation is not currently a part of nginx.ng
 | 
						|
    from_source: False
 | 
						|
 | 
						|
    package:
 | 
						|
      opts: {} # this partially exposes parameters of pkg.installed
 | 
						|
 | 
						|
    service:
 | 
						|
      enable: True # Whether or not the service will be enabled/running or dead
 | 
						|
      opts: {} # this partially exposes parameters of service.running / service.dead
 | 
						|
 | 
						|
    server:
 | 
						|
      opts: {} # this partially exposes file.managed parameters as they relate to the main nginx.conf file
 | 
						|
 | 
						|
      # nginx.conf (main server) declarations
 | 
						|
      # dictionaries map to blocks {} and lists cause the same declaration to repeat with different values
 | 
						|
      config: 
 | 
						|
        worker_processes: 4
 | 
						|
        pid: /run/nginx.pid
 | 
						|
        events:
 | 
						|
          worker_connections: 768
 | 
						|
        http:
 | 
						|
          sendfile: on
 | 
						|
          include:
 | 
						|
            - /etc/nginx/mime.types
 | 
						|
            - /etc/nginx/conf.d/*.conf
 | 
						|
 | 
						|
    vhosts:
 | 
						|
      disabled_postfix: .disabled # a postfix appended to files when doing non-symlink disabling
 | 
						|
      symlink_opts: {} # partially exposes file.symlink params when symlinking enabled sites
 | 
						|
      rename_opts: {} # partially exposes file.rename params when not symlinking disabled/enabled sites
 | 
						|
      managed_opts: {} # partially exposes file.managed params for managed vhost files
 | 
						|
      dir_opts: {} # partially exposes file.directory params for site available/enabled dirs
 | 
						|
 | 
						|
      # vhost declarations
 | 
						|
      # vhosts will default to being placed in vhost_available
 | 
						|
      managed:
 | 
						|
        mysite: # relative pathname of the vhost file
 | 
						|
          # may be True, False, or None where True is enabled, False, disabled, and None indicates no action
 | 
						|
          dir: /tmp # an alternate directory (not sites-available) where this vhost may be found
 | 
						|
          disabled_name: mysite.aint_on # an alternative disabled name to be use when not symlinking
 | 
						|
          enabled: True
 | 
						|
          
 | 
						|
          # May be a list of config options or None, if None, no vhost file will be managed/templated
 | 
						|
          # Take server directives as lists of dictionaries. If the dictionary value is another list of
 | 
						|
          # dictionaries a block {} will be started with the dictionary key name
 | 
						|
          config:
 | 
						|
            - server:
 | 
						|
              - server_name: localhost
 | 
						|
              - listen: 
 | 
						|
                - 80
 | 
						|
                - default_server
 | 
						|
              - index:
 | 
						|
                - index.html
 | 
						|
                - index.htm
 | 
						|
              - location ~ .htm:
 | 
						|
                - try_files:
 | 
						|
                  - $uri
 | 
						|
                  - $uri/ =404
 | 
						|
                - test: something else
 | 
						|
                
 | 
						|
          # The above outputs:
 | 
						|
          # server {
 | 
						|
          #    server_name localhost;
 | 
						|
          #    listen 80 default_server;
 | 
						|
          #    index index.html index.htm;
 | 
						|
          #    location ~ .htm {
 | 
						|
          #        try_files $uri $uri/ =404;
 | 
						|
          #        test something else;
 | 
						|
          #    }
 | 
						|
          # }         
 |