Sys-svc-webserver-https Role¶
Description: No description available
Variables¶
author: Kevin Veen-Birkenbach
description: Configures Nginx to serve sites securely over HTTPS, integrates Let’s Encrypt and cleans up stale domain configs.
company: Kevin Veen-Birkenbach
Consulting & Coaching Solutions https://www.veen.world
license: Infinito.Nexus NonCommercial License
license_url: https://s.infinito.nexus/license
min_ansible_version: 2.9
platforms: [{‘name’: ‘Archlinux’, ‘versions’: [‘rolling’]}]
galaxy_tags: [‘nginx’, ‘https’, ‘tls’, ‘letsencrypt’, ‘security’, ‘automation’]
repository: https://s.infinito.nexus/code
documentation: https://docs.infinito.nexus
issue_tracker_url: https://s.infinito.nexus/issues
README¶
Webserver HTTPS Provisioning 🚀¶
Description¶
The sys-svc-webserver-https role extends a basic Nginx installation by wiring in everything you need to serve content over HTTPS:
Ensures your Nginx server is configured for SSL/TLS.
Pulls in Let’s Encrypt ACME challenge handling.
Applies global cleanup of unused domain configs.
This role is built on top of your existing sys-svc-webserver-core
role, and it automates the end-to-end process of turning HTTP sites into
secure HTTPS sites.
Overview¶
When you apply sys-svc-webserver-https, it will:
Include the
sys-svc-webserver-corerole to install and configure Nginx.Clean up any stale vHost files under
sys-svc-cln-domains.Deploy the Let’s Encrypt challenge-and-redirect snippet from
sys-svc-letsencrypt.Reload Nginx automatically when any template changes.
All tasks are idempotent—once your certificates are in place and your configuration is set, Ansible will skip unchanged steps on subsequent runs.
Features¶
- 🔒 Automatic HTTPS RedirectSets up port 80 → 443 redirect and serves
/.well-known/acme-challenge/for Certbot. - 🔑 Let’s Encrypt IntegrationPulls in challenge configuration and CAA-record management for automatic certificate issuance and renewal.
- 🧹 Domain CleanupRemoves obsolete or orphaned server blocks before enabling HTTPS.
- 🚦 Handler-SafeTriggers an Nginx reload only when necessary, minimizing service interruptions.
License¶
This role is released under the Infinito.Nexus NonCommercial License. See https://s.infinito.nexus/license for details.