From eb43727aee4356089f1b1111efd3c40c3a4a5474 Mon Sep 17 00:00:00 2001
From: Ahmed Abdelhalim <pm@a14m.dev>
Date: Sat, 13 Sep 2025 22:02:25 +0200
Subject: Add nginx role

---
 roles/nginx/meta/argument_specs.yml | 26 ++++++++++++++++++++++++++
 roles/nginx/meta/main.yml           | 21 +++++++++++++++++++++
 2 files changed, 47 insertions(+)
 create mode 100644 roles/nginx/meta/argument_specs.yml
 create mode 100644 roles/nginx/meta/main.yml

(limited to 'roles/nginx/meta')

diff --git a/roles/nginx/meta/argument_specs.yml b/roles/nginx/meta/argument_specs.yml
new file mode 100644
index 00000000..18b8de89
--- /dev/null
+++ b/roles/nginx/meta/argument_specs.yml
@@ -0,0 +1,26 @@
+---
+argument_specs:
+  main:
+    short_description: "Minimal nginx reverse proxy"
+    description: "Configure nginx as a reverse proxy with TLS 1.3 and automatic SSL certificate generation"
+    options:
+      nginx_server_name:
+        type: "str"
+        description: "The server name for nginx configuration"
+        default: "{{ ansible_hostname }}.local"
+      nginx_worker_processes:
+        type: "int"
+        description: "Number of nginx worker processes"
+        default: 2
+      nginx_worker_connections:
+        type: "int"
+        description: "Number of worker connections per process"
+        default: 512
+      nginx_ssl_certificate:
+        type: "str"
+        description: "Path to SSL certificate file"
+        default: "/etc/ssl/certs/nginx-selfsigned.crt"
+      nginx_ssl_certificate_key:
+        type: "str"
+        description: "Path to SSL private key file"
+        default: "/etc/ssl/private/nginx-selfsigned.key"
diff --git a/roles/nginx/meta/main.yml b/roles/nginx/meta/main.yml
new file mode 100644
index 00000000..d11309e0
--- /dev/null
+++ b/roles/nginx/meta/main.yml
@@ -0,0 +1,21 @@
+---
+dependencies:
+  - role: "systemd"
+  - role: "openssl"
+  - role: "logrotate"
+galaxy_info:
+  author: "a14m"
+  description: "Configure basic distro nginx reverse proxy"
+  company: "kartoffeln.work GmbH."
+  license: "MIT"
+  min_ansible_version: "2.18"
+  platforms:
+    - name: "ArchLinux"
+      versions:
+        - "all"
+    - name: "Ubuntu"
+      versions:
+        - "noble"
+    - name: "Debian"
+      versions:
+        - "bookworm"
-- 
cgit v1.2.3