Sign inSign up

danihodovic/openresty

By danihodovic

•Updated over 5 years ago

Image
0

374

danihodovic/openresty repository overview

⁠ansible-openresty Build Status

Role to deploy a Docker container with Openresty.

Includes opt-in config for rate limiting, Prometheus metrics and default proxy config.

⁠TODO CI

  • assert that conf.d is always relative
  • converge
  • verify
  • idempotence
  • add health checks without duplicate server blocks
  • TODO: warnings

⁠Examples

- name: Deploy Openresty
  hosts: localhost
  vars:
    ansible_become: true
  tasks:
    - name: Create a network
      docker_network:
        name: test_default

    - import_role:
        name: ansible-role-openresty
      vars:
        openresty_includes_extras:
          findwork-dev.conf: |
            server {
              server myserver.org;
              location / {
                set $proxy_address mycontainer:5050;
                proxy_pass http://$proxy_address;
              }
            }
        openresty_includes_builtin:
          - proxy.conf
          - rate_limit.conf
          - prometheus_metrics.conf
        openresty_docker_networks:
          - name: test_default
⁠With lua-resty-auto-ssl

For running Openresty with auto SSL the following additions are needed:

  • Defining the variable openresty_ssl_domains. The domains in the list will be added to a regex pattern and only these domains will be eligible for querying Let's Encrypt for a SSL certificate.
  • Add the '{{ nginx_auto_ssl_config|index(2)}}' to your vhost server block as this will add the necessary lua blocks for starting the SSL certificate creation process and it will define fallback SSL certs so that nginx can start.
- name: Deploy Openresty
  hosts: localhost
  become: true
  tasks:
    - name: Create a network
      docker_network:
        name: test_default

    - import_role:
        name: ansible-openresty
      vars:
        openresty_includes_extras:
          findwork-dev.conf: |
            server {
              listen 443 ssl;
              server_name findwork.dev;

              {{ openresty_auto_ssl_config|indent(2) }}

              location / {
                set $proxy_address mycontainer:5050;
                proxy_pass http://$proxy_address;
              }
            }
        openresty_includes_builtin:
          - ssl.conf
          - proxy.conf
          - logging.conf
        openresty_ssl_domains:
          - findwork.dev
        openresty_docker_networks:
          - name: test_default
⁠Using proxy.conf

Proxy.conf will include the docker dns resolver 127.0.0.11 which requires a user defined network⁠.

This role will check the configuration so ensure you use variables when using proxy_pass otherwise the host will not be found.

location / {
  set $proxy_address myserver:5050;
  proxy_pass http://$proxy_address;
}

⁠Requirements

  • docker daemon installed on the host
  • docker pip library installed on the host pip install docker

Tag summary

Content type

Image

Digest

Size

117.1 MB

Last updated

over 5 years ago

docker pull danihodovic/openresty