nginx redirect

playbooks/edx-east/nginx_redirect.yml

+# Example ansible-playbook -i redirect.example.com -e@/path/to/secure/var/file.yml
+#
+# the secure var file will need to have the following vars defined:
+#
+# NGINX_ENABLE_SSL
+# NGINX_SSL_CERTIFICATE
+# NGINX_SSL_KEY
+# # for the redirects use $scheme://example.com to match the protocol
+#
+# secure vars example:
+#  # Vars for setting up the nginx redirect instance
+#  NGINX_ENABLE_SSL: True
+#  NGINX_SSL_CERTIFICATE: '../../../example-secure/ssl/example.com.crt'
+#  NGINX_SSL_KEY: '../../../example-secure/ssl/example.com.key'
+#  nginx_redirects:
+#  - server_name: nginx-redirect.example.edx.org
+#    redirect: "http://www.example.com"
+#  - server_name: example.com
+#    redirect: "http://www.example.com"
+#    default: true
+#
+#
+#
+# - ...
+- name: utility play to setup an nginx redirect
+  hosts: all
+  sudo: True
+  gather_facts: True
+  roles:
+    - role: nginx
+      nginx_sites:
+      - nginx_redirect

playbooks/roles/nginx/templates/nginx_redirect.j2

+{% for item in nginx_redirects -%}
+
+{%- if "default" in item -%}
+  {%- set default_site = "default" -%}
+{%- else -%}
+  {%- set default_site = "" -%}
+{%- endif -%}
+
+server {
+  listen 80 {{ default_site }};
+  listen 443 {{ default_site }} ssl;
+
+  ssl_certificate /etc/ssl/certs/{{ NGINX_SSL_CERTIFICATE|basename }};
+  ssl_certificate_key /etc/ssl/private/{{ NGINX_SSL_KEY|basename }};
+
+  server_name {{ item['server_name'] }};
+  return 301 {{ item['redirect'] }}$request_uri;
+}
+{% endfor %}
+