Infrastructure/ansible/roles/reverse-proxy/tasks/main.yml

43 lines
863 B
YAML

---
- name: Install Caddy
ansible.builtin.package:
name: caddy
state: present
- name: Update Caddyfile
ansible.builtin.copy:
src: Caddyfile
dest: /etc/caddy/Caddyfile
- name: Create site config directories
ansible.builtin.file:
path: "{{ item }}"
state: directory
with_items:
- /etc/caddy/sites-available
- /etc/caddy/sites-enabled
- /var/log/caddy
- name: Configure logging dir
ansible.builtin.file:
path: "{{ item }}"
state: directory
owner: caddy
group: caddy
with_items:
- /var/log/caddy
- name: Enable and start the Caddy server
ansible.builtin.service:
name: caddy.service
enabled: true
state: started
- name: Configure nftables
ansible.builtin.copy:
dest: /etc/nftables/input.d/caddy.nft
src: caddy.nft
when: firewall is defined
notify: Restart nftables