add homekeeper stack

infrastructure/roles/nginx/tasks/main.yml

@@ -0,0 +1,50 @@
+---
+- name: Install nginx and certbot
+  apt:
+    name:
+      - nginx
+      - certbot
+      - python3-certbot-nginx
+    state: present
+    update_cache: true
+
+- name: Remove default nginx site
+  file:
+    path: /etc/nginx/sites-enabled/default
+    state: absent
+  notify: Reload nginx
+
+- name: Deploy homekeeper nginx config
+  template:
+    src: homekeeper.conf.j2
+    dest: /etc/nginx/sites-available/homekeeper.conf
+    mode: "0644"
+  notify: Reload nginx
+
+- name: Enable homekeeper nginx site
+  file:
+    src: /etc/nginx/sites-available/homekeeper.conf
+    dest: /etc/nginx/sites-enabled/homekeeper.conf
+    state: link
+  notify: Reload nginx
+
+- name: Obtain Let's Encrypt certificates
+  command: >
+    certbot --nginx -d {{ domain }} -d {{ gitea_domain }}
+    --non-interactive --agree-tos -m {{ gitea_admin_email }}
+    --redirect
+  args:
+    creates: /etc/letsencrypt/live/{{ domain }}/fullchain.pem
+  notify: Reload nginx
+
+- name: Enable nginx
+  service:
+    name: nginx
+    enabled: true
+    state: started
+
+handlers:
+  - name: Reload nginx
+    service:
+      name: nginx
+      state: reloaded