# NibTech::nginx::tasks::main
# This role is for installing and configuring nginx
# Role repository:
---

# - setup nginx system user
#   - make sure user is part of the nibtech group
#   - no home-dir

- name: Configure nginx Service User
  ansible.builtin.user:
    name: "nginx"
    system: true
    group: "nibtech"
    shell: "/sbin/nologin"
    create_home: false

- name: Create nginx Shared Directory
  ansible.builtin.directory:
    path: "/opt/nginx"
    state: present
    owner: "nginx"
    group: "nibtech"
    mode: "0664"

- name: Setup nginx YUM Repository
  ansible.builtin.yum_repository:
    name: "nginx-stable"
    description: "nginx Stable Release"
    baseurl: http://nginx.org/packages/centos/$releasever/$basearch/
    gpgcheck: true
    gpgkey: https://nginx.org/keys/nginx_signing.key
    module_hotfixes: true
    enabled: false
    state: present

- name: Install nginx
  ansible.builtin.dnf:
    name: "nginx"
    enablerepo: nginx-stable
    state: "latest"

- name: Add nginx Configuration File
  ansible.builtin.copy:
    src: "nginx.conf"
    dest: "/etc/nginx/nginx.conf"
    owner: "nginx"
    group: "nibtech"
    mode: "0600"