Update nginx role

- Switch "worker_processes" to "auto"
- Disable "server_tokens" globally
- Change formatting for readability

roles/nginx/files/etc/nginx/nginx.conf

@@ -1,5 +1,5 @@
 user www-data;
-worker_processes 4;
+worker_processes auto;
 pid /run/nginx.pid;
 
 events {
@@ -18,7 +18,7 @@ http {
         tcp_nodelay on;
         keepalive_timeout 65;
         types_hash_max_size 2048;
-        # server_tokens off;
+        server_tokens off;
 
         # server_names_hash_bucket_size 64;
         # server_name_in_redirect off;

roles/nginx/handlers/main.yml

@@ -1,6 +1,10 @@
 ---
 - name: restart nginx
-  service: name=nginx state=restarted
+  service:
+    name: nginx
+    state: restarted
 
-- name: reload nginx config
-  service: name=nginx state=reloaded
+- name: reload nginx
+  service:
+    name: nginx
+    state: reloaded

roles/nginx/tasks/main.yml

@@ -1,36 +1,34 @@
 ---
-- name: be sure nginx is installed
-  apt: name=nginx state=latest
+- name: install nginx
+  apt:
+    name: nginx
+    state: present
+  tags: nginx
+
+- name: disable default site
+  file:
+    path: /etc/nginx/sites-enabled/default
+    state: absent
+  notify: restart nginx
   tags: nginx
 
 - name: copy includes
-  copy: >
-    src=etc/nginx/include
-    dest=/etc/nginx
-    mode=0644
-    owner=root
-    group=root
-  notify:
-    - restart nginx
+  copy:
+    src: etc/nginx/include
+    dest: /etc/nginx
+    mode: 0644
+    owner: root
+    group: root
+  notify: restart nginx
   tags: nginx
 
-- name: remove default site
-  file: path={{ item }} state=absent
-  with_items:
-    - /etc/nginx/sites-available/default
-    - /etc/nginx/sites-enabled/default
-    - /var/www/html
-  notify:
-    - restart nginx
-  tags: nginx
-
-- name: configure nginx
-  copy: >
-    src=etc/nginx/nginx.conf
-    dest=/etc/nginx/nginx.conf
-    mode=0644
-    owner=root
-    group=root
-  notify:
-    - restart nginx
+- name: copy nginx.conf
+  copy:
+    src: etc/nginx/nginx.conf
+    dest: /etc/nginx
+    mode: 0644
+    owner: root
+    group: root
+    backup: yes
+  notify: restart nginx
   tags: nginx

roles/website/includes/base-static/tasks/main.yml

@@ -6,7 +6,7 @@
     owner=root
     group=root
     mode=0644
-  notify: reload nginx config
+  notify: reload nginx
   tags:
     - nginx
     - website
@@ -28,7 +28,7 @@
     group=root
     mode=0644
     state=link
-  notify: reload nginx config
+  notify: reload nginx
   tags:
     - nginx
     - website