ansible role 实现 nginx1.18 部署

【实验需求】

创建nginx的role，使用role进行批量安装nginx

【实验步骤】

[root@control ansible]# mkdir -p /etc/ansible/roles/nginx/{files,handlers,tasks,templates,vars}
[root@control ansible]# cd roles/nginx/

[root@control nginx]# tree
.
├── files
├── handlers
│   └── main.yml
├── tasks
│   ├── BuildInstall.yml
│   ├── Config.yml
│   ├── dir.yml
│   ├── DownloadFile.yml
│   ├── FileOwner.yml
│   ├── install.yml
│   ├── Linkfile.yml
│   ├── main.yml
│   ├── service.yml
│   ├── StartScript.yml
│   ├── UnarchiveFile.yml
│   └── user.yml
├── templates
│   ├── nginx.conf.j2
│   └── nginx.service.j2
└── vars
    └── main.yml
    
[root@control nginx]# vim /etc/ansible/roles/nginx/vars/main.yml
PackageDir: "/root"
PackageName: "nginx-1.18.0"
SUFFIX: '.tar.gz'
PACKAGE_INSTALL_DIR: "/apps/nginx"
PIDFileDIR: "/apps/nginx/run"

[root@control nginx]# vim tasks/install.yml
- name: install packages
  yum:
    name:
      - gcc
      - pcre-devel
      - openssl-devel
      - zlib-devel
      - wget
      - make

[root@control nginx]# vim tasks/user.yml
- name: create user
  user:
    name: nginx
    uid: 80
    shell: /sbin/nologin
    system: yes
    create_home: no

[root@control nginx]# vim tasks/dir.yml
- name: create install dir
  file:
    path: "{{ PACKAGE_INSTALL_DIR }}"
    state: directory
- name: create PID file directory
  file:
    path: "{{ PIDFileDIR }}"
    state: directory

[root@control nginx]# vim tasks/DownloadFile.yml
- name: download nginx1.18 file
  get_url:
    url: https://nginx.org/download/nginx-1.18.0.tar.gz
    dest: "{{ PackageDir }}"

[root@control nginx]# vim tasks/UnarchiveFile.yml
- name: copy file to remote host
  unarchive:
    src: "{{ PackageDir }}/{{ PackageName }}{{ SUFFIX }}"
    dest: "/usr/local/src"
    copy: no

[root@control nginx]# vim tasks/BuildInstall.yml
- name: built install nginx
  shell: ./configure --prefix={{ PACKAGE_INSTALL_DIR }} --user=nginx --group=nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-stream --with-stream_ssl_module --with-stream_realip_module && make -j {{ ansible_processor_vcpus }} && make install
  args:
    chdir: /usr/local/src/{{ PackageName }}

[root@control nginx]# vim tasks/FileOwner.yml
- name: modify file owner
  file:
    path: "{{ PACKAGE_INSTALL_DIR }}"
    owner: nginx
    group: nginx
    recurse: yes

[root@control nginx]# vim tasks/Linkfile.yml
- name: create link file
  file:
    src: "{{ PACKAGE_INSTALL_DIR }}/sbin/nginx"
    dest: /usr/sbin/nginx
    state: link

[root@control nginx]# vim tasks/StartScript.yml
- name: prepare nginx service startup file
  template:
    src: nginx.service.j2
    dest: /usr/lib/systemd/system/nginx.service

[root@control nginx]# vim tasks/Config.yml
- name: prepare nginx config file
  template:
    src: nginx.conf.j2
    dest: "{{ PACKAGE_INSTALL_DIR }}/conf/nginx.conf"
  notify: restart

[root@control nginx]# vim tasks/service.yml
- name: start nginx service
  service:
    name: nginx
    state: started
    enabled: yes
    
[root@control nginx]# vim tasks/main.yml
- include: install.yml
- include: user.yml
- include: dir.yml
- include: DownloadFile.yml
- include: UnarchiveFile.yml
- include: BuildInstall.yml
- include: FileOwner.yml
- include: Linkfile.yml
- include: StartScript.yml
- include: Config.yml
- include: service.yml

[root@control nginx]# vim handlers/main.yml
- name: restart nginx
  service:
    name: nginx
    state: restarted

[root@control nginx]# vim templates/nginx.service.j2
[Unit]
Description=The nginx HTTP and reverse proxy server
After=network.target remote-fs.target nss-lookup.target
[Service]
Type=forking
PIDFile={{ PIDFileDIR }}/nginx.pid
ExecStartPre=/usr/bin/rm -f {{ PIDFileDIR }}/nginx.pid
ExecStartPre=/usr/sbin/nginx -t
ExecStart=/usr/sbin/nginx
ExecReload=/bin/kill -s HUP $MAINPID
KillSignal=SIGQUIT
TimeoutStopSec=5
KillMode=mixed
PrivateTmp=true
[Install]
WantedBy=multi-user.target

[root@control nginx]# vim templates/nginx.conf.j2
user  nginx nginx;
worker_processes {{ ansible_processor_vcpus }};

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

pid {{ PIDFileDIR }}/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       80;
        server_name  www.wuhaolam.top;
        server_tokens off;
        client_max_body_size 10m;
        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            root   /data/nginx/wordpress;
            index  index.php index.html index.htm;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        location ~ \.php$ {
            root           /data/nginx/wordpress;
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi_params;
            fastcgi_hide_header X-Powered-By;
        }

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }

    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}


    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;

    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

}

[root@control ansible]# vim /etc/ansible/role_nginx.yml
---
- hosts: webservers
  roles:
    - nginx