Update updates role for srv01

roles/nginx/defaults/main.yml

@@ -1 +1,2 @@
+letsencrypt_webroot: /var/www/letsencrypt
 nginx_resolver: 127.0.0.1 [::1]

roles/nginx/files/etc/nginx/include/letsencrypt_srv01.conf

@@ -0,0 +1,5 @@
+location ^~ /.well-known/acme-challenge {
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_pass http://srv01.hamburg.freifunk.net$request_uri;
+}

roles/nginx/tasks/main.yml

@@ -22,6 +22,11 @@
   notify: restart nginx
   tags: nginx
 
+- name: template letsencrypt.conf
+  template:
+    src: letsencrypt.conf.j2
+    dest: /etc/nginx/include/letsencrypt.conf
+
 - name: template nginx.conf
   template:
     src: templates/nginx.conf.j2

roles/nginx/templates/letsencrypt.conf.j2

@@ -0,0 +1,4 @@
+location ^~ /.well-known/acme-challenge {
+  root {{ letsencrypt_webroot }};
+  try_files $uri $uri/ =404;
+}