Michael Schiemer
e30753ba0e
- Fix RedisCache driver to handle MGET failures gracefully with fallback - Add comprehensive discovery context comparison debug tools - Identify root cause: WEB context discovery missing 166 items vs CLI - WEB context missing RequestFactory class entirely (52 vs 69 commands) - Improved exception handling with detailed binding diagnostics
38 lines
760 B
YAML
38 lines
760 B
YAML
---
|
|
# Security Configuration for Nginx
|
|
|
|
- name: Create security headers configuration
|
|
template:
|
|
src: security-headers.conf.j2
|
|
dest: "{{ nginx_conf_d_path }}/security-headers.conf"
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
notify: restart nginx
|
|
tags:
|
|
- nginx
|
|
- security
|
|
- headers
|
|
|
|
- name: Configure SSL settings
|
|
template:
|
|
src: ssl-settings.conf.j2
|
|
dest: "{{ nginx_conf_d_path }}/ssl-settings.conf"
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
when: ssl_provider is defined
|
|
notify: restart nginx
|
|
tags:
|
|
- nginx
|
|
- ssl
|
|
- security
|
|
|
|
- name: Remove default Nginx site
|
|
file:
|
|
path: "{{ nginx_sites_enabled_path }}/default"
|
|
state: absent
|
|
notify: restart nginx
|
|
tags:
|
|
- nginx
|
|
- security |