adelgado/ansible-role-nagios
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add option to configure apache and fix redirection

Browse source
This commit is contained in:
Antonio J. Delgado 2023-02-15 15:36:01 +02:00
parent 42185e78aa
commit 5cd8136f0e
3 changed files with 41 additions and 43 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
defaults/main.yml
View file

@ -1,4 +1,5 @@
--- ---
configure_apache: false
nagios4_config: nagios4_config:
admin_email: 'monitor-admin@example.org' admin_email: 'monitor-admin@example.org'
admin_pager: 'monitor-admin-pager@example.com' admin_pager: 'monitor-admin-pager@example.com'

5
tasks/main.yml
View file

@ -5,5 +5,6 @@
- name: Ensure Nagios is configured - name: Ensure Nagios is configured
include_tasks: configure.yml include_tasks: configure.yml
# - name: Ensure Apache is configured for Nagios - name: Ensure Apache is configured for Nagios
# include_tasks: configure_apache.yml include_tasks: configure_apache.yml
when: configure_apache

78
templates/apache_vhost.j2
View file

@ -6,13 +6,48 @@
{% endif %} {% endif %}
## Logging ## Logging
ErrorLog "/var/log/apache2/{{ item.vhostname }}_error_ssl.log" ErrorLog "/var/log/apache2/{{ item.vhostname }}_error.log"
ServerSignature Off ServerSignature Off
CustomLog "/var/log/apache2/{{ item.vhostname }}_access_ssl.log" combined CustomLog "/var/log/apache2/{{ item.vhostname }}_access.log" combined
ErrorDocument 404 https://susurrando.com/notfound.php ErrorDocument 404 https://susurrando.com/notfound.php
ErrorDocument 500 https://susurrando.com/error500.php ErrorDocument 500 https://susurrando.com/error500.php
ErrorDocument 503 https://susurrando.com/error503.php ErrorDocument 503 https://susurrando.com/error503.php
ProxyPass / https://{{ item.vhostname }}/
ProxyPassReverse / https://{{ item.vhostname }}/
</VirtualHost>
<VirtualHost *:443>
ServerName {{ item.vhostname }}
ServerAdmin {{ item.webadmin }}
## Logging
ErrorLog "/var/log/apache2/{{ item.vhostname }}_ssl_error_ssl.log"
ServerSignature Off
CustomLog "/var/log/apache2/{{ item.vhostname }}_ssl_access_ssl.log" combined
ErrorDocument 404 https://susurrando.com/notfound.php
ErrorDocument 500 https://susurrando.com/error500.php
ErrorDocument 503 https://susurrando.com/error503.php
## Rewrite rules
RewriteEngine On
## SSL directives
SSLEngine on
SSLCertificateFile "{{ item.ssl_certificate_file }}"
SSLCertificateKeyFile "{{ item.ssl_certificate_key_file }}"
{% if item.ssl_certificate_chain_file is defined %}
SSLCertificateChainFile "{{ item.ssl_certificate_chain_file }}"
{% endif %}
SSLProtocol all -SSLv3 -SSLv2 -TLSv1 -TLSv1.1
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
## Custom fragment
SSLHonorCipherOrder on
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
SSLProxyEngine On
SSLProxyCheckPeerCN on
SSLProxyCheckPeerExpire on
ScriptAlias /cgi-bin/nagios4 /usr/lib/cgi-bin/nagios4 ScriptAlias /cgi-bin/nagios4 /usr/lib/cgi-bin/nagios4
ScriptAlias /nagios4/cgi-bin /usr/lib/cgi-bin/nagios4 ScriptAlias /nagios4/cgi-bin /usr/lib/cgi-bin/nagios4
@ -87,44 +122,5 @@
AllowOverride None AllowOverride None
Order allow,deny Order allow,deny
Allow from all Allow from all
## Only for apache 2.4 ##
# Require all granted
</Directory> </Directory>
</VirtualHost>
<VirtualHost *:443>
ServerName {{ item.vhostname }}
ServerAdmin {{ item.webadmin }}
## Logging
ErrorLog "/var/log/apache2/{{ item.vhostname }}_ssl_error_ssl.log"
ServerSignature Off
CustomLog "/var/log/apache2/{{ item.vhostname }}_ssl_access_ssl.log" combined
ErrorDocument 404 https://susurrando.com/notfound.php
ErrorDocument 500 https://susurrando.com/error500.php
ErrorDocument 503 https://susurrando.com/error503.php
## Rewrite rules
RewriteEngine On
## SSL directives
SSLEngine on
SSLCertificateFile "{{ item.ssl_certificate_file }}"
SSLCertificateKeyFile "{{ item.ssl_certificate_key_file }}"
{% if item.ssl_certificate_chain_file is defined %}
SSLCertificateChainFile "{{ item.ssl_certificate_chain_file }}"
{% endif %}
SSLProtocol all -SSLv3 -SSLv2 -TLSv1 -TLSv1.1
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
## Custom fragment
SSLHonorCipherOrder on
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
SSLProxyEngine On
SSLProxyCheckPeerCN on
SSLProxyCheckPeerExpire on
ProxyPass / http://{{ item.vhostname }}/
ProxyPassReverse / http://{{ item.vhostname }}/
</VirtualHost> </VirtualHost>