diff --git a/ansible/playbooks/roles/nginx/files/registry.myinstalink.ru b/ansible/playbooks/roles/nginx/files/registry.myinstalink.ru new file mode 100644 index 0000000..d1c704c --- /dev/null +++ b/ansible/playbooks/roles/nginx/files/registry.myinstalink.ru @@ -0,0 +1,29 @@ +server { + if ($host = registry.myinstalink.ru) { + return 301 https://$host$request_uri; + } # managed by Certbot + + listen 80; + server_name registry.myinstalink.ru; + return 301 https://$host$request_uri; +} + +server { + listen 443 ssl; + server_name registry.myinstalink.ru; + ssl_certificate /etc/letsencrypt/live/myinstalink.ru/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/myinstalink.ru/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + + access_log /var/log/nginx/registry.myinstalink.ru-access.log; + error_log /var/log/nginx/registry.myinstalink.ru-error.log; + + location / { + proxy_pass http://127.0.0.1:5000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +} \ No newline at end of file diff --git a/ansible/playbooks/roles/nginx/tasks/main.yml b/ansible/playbooks/roles/nginx/tasks/main.yml index c65034c..9810ca1 100644 --- a/ansible/playbooks/roles/nginx/tasks/main.yml +++ b/ansible/playbooks/roles/nginx/tasks/main.yml @@ -13,6 +13,7 @@ - "myinstalink.ru" - "gitea.myinstalink.ru" - "drone.myinstalink.ru" + - "registry.myinstalink.ru" - name: create link file: @@ -23,4 +24,5 @@ - "myinstalink.ru" - "gitea.myinstalink.ru" - "drone.myinstalink.ru" + - "registry.myinstalink.ru" notify: restart nginx