Konfiguration von media und meta als statische Sites.

roles/web-server/static/handlers/main.yml

@@ -1,6 +1,3 @@
 ---
-- name: restart nginx
-  service: name=nginx state=restarted
-
 - name: reload nginx config
   service: name=nginx state=reloaded

roles/web-server/static/tasks/main.yml

@@ -0,0 +1,39 @@
+---
+- name: configure static sites
+  template: >
+    backup=yes
+    src=site.j2
+    dest="/etc/nginx/sites-available/{{ item[0] }}"
+    owner=root
+    group=root
+    mode=0644
+  with_items: "{{ web.sites.static.items() }}"
+  notify: reload nginx config
+  tags:
+    - nginx
+    - website
+    - static
+
+- name: create static site roots
+  file: path="{{ item.document_root.path }}" state=directory owner=www-data group=www-data mode=0755
+  with_items: "{{ web.sites.static.values() }}"
+  when: item.document_root.create
+  tags:
+    - nginx
+    - website
+    - static
+
+- name: enable static sites
+  file: >
+    src="/etc/nginx/sites-available/{{ item }}"
+    dest="/etc/nginx/sites-enabled/{{ item }}"
+    owner=root
+    group=root
+    mode=0644
+    state=link
+  with_items: "{{ web.sites.static.keys() }}"
+  notify: reload nginx config
+  tags:
+    - nginx
+    - website
+    - static

roles/web-server/static/templates/site.j2

@@ -0,0 +1,25 @@
+#
+# ACTHUNG:
+#
+# Wird via Ansible konfiguriert. Bitte nicht manuell ändern!
+#
+
+{% for port in item[1].ports %}
+server {
+    include /etc/nginx/include/no_logging.conf;
+    include /etc/nginx/include/no_dotfiles.conf;
+    include /etc/nginx/include/no_symlinks.conf;
+
+    {% if item[1].listing %}
+        include /etc/nginx/include/listing.conf;
+    {% endif %}
+
+    listen {{ port.number }}{% if port.ssl %} ssl{% endif %};
+    listen [::]:{{ port.number }}{% if port.ssl %} ssl{% endif %};
+
+    server_name {{ item[1].domains | join(" ") }};
+
+    root {{ item[1].document_root.path }};
+}
+
+{% endfor %}