add nginx role

roles/nginx/tasks/main.yml

@@ -0,0 +1,53 @@
+---
+- name: "Install gpg-agent"
+  ansible.builtin.apt:
+    name: gpg-agent
+    state: present
+    update_cache: true
+    cache_valid_time: 3600
+
+- name: "Add NGINX signing key"
+  ansible.builtin.apt_key:
+    url: https://nginx.org/keys/nginx_signing.key
+    state: present
+
+- name: "Add NGINX repository"
+  notify: "Update apt cache"
+  ansible.builtin.apt_repository:
+    repo: "deb http://nginx.org/packages/{{ ansible_distribution | lower }}/ {{ ansible_distribution_release }} nginx"
+    state: present
+
+- name: "Install specific NGINX version"
+  notify: "Start nginx"
+  ansible.builtin.apt:
+    name: "nginx={{ nginx_version }}*"
+    state: present
+
+- name: "Remove default site configuration if it exists"
+  notify: "Reload nginx"
+  ansible.builtin.file:
+    path: /etc/nginx/conf.d/default.conf
+    state: absent
+
+- name: "Deploy a single site configuration"
+  when: site is defined
+  notify: "Reload nginx"
+  ansible.builtin.copy:
+    dest: "/etc/nginx/conf.d/{{ site.confname }}.conf"
+    owner: root
+    group: root
+    mode: "0644"
+    content: "{{ site.content }}"
+
+- name: "Deploy custom site configurations"
+  when: dir_sites is defined
+  with_fileglob:
+    - "{{ dir_sites }}/*.conf"
+  notify: "Reload nginx"
+  ansible.builtin.copy:
+    src: "{{ item }}"
+    dest: "/etc/nginx/conf.d/{{ item | basename }}"
+    owner: root
+    group: root
+    mode: '0644'
+    # validate: '/usr/sbin/nginx -t -c %s'