{"id":18379957,"url":"https://github.com/samdbmg/ansible-nginx-gateway","last_synced_at":"2026-03-19T04:06:37.778Z","repository":{"id":54395611,"uuid":"218775408","full_name":"samdbmg/ansible-nginx-gateway","owner":"samdbmg","description":"Ansible role for running an NGINX gateway server","archived":false,"fork":false,"pushed_at":"2022-07-24T06:21:12.000Z","size":59,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-04-11T18:08:38.642Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Jinja","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/samdbmg.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-10-31T13:41:51.000Z","updated_at":"2021-09-29T20:56:29.000Z","dependencies_parsed_at":"2022-08-13T14:20:47.110Z","dependency_job_id":null,"html_url":"https://github.com/samdbmg/ansible-nginx-gateway","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/samdbmg/ansible-nginx-gateway","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/samdbmg%2Fansible-nginx-gateway","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/samdbmg%2Fansible-nginx-gateway/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/samdbmg%2Fansible-nginx-gateway/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/samdbmg%2Fansible-nginx-gateway/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/samdbmg","download_url":"https://codeload.github.com/samdbmg/ansible-nginx-gateway/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/samdbmg%2Fansible-nginx-gateway/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28694832,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-23T14:15:13.573Z","status":"ssl_error","status_checked_at":"2026-01-23T14:09:05.534Z","response_time":59,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-06T00:41:32.354Z","updated_at":"2026-01-23T15:43:33.814Z","avatar_url":"https://github.com/samdbmg.png","language":"Jinja","funding_links":[],"categories":[],"sub_categories":[],"readme":"NGINX Gateway\n=========\n\nConfigures nginx as a gateway to host static sites and reverse-proxy\nother ones. Supports per-site certificates, client certificate authentication\n(mutual TLS) and uses an NGINX config from [nginxconfig.io](https://nginxconfig.io).\n\nRequirements\n------------\n\n- You need to have your own certificate already\n\nRole Variables\n--------------\n\nThe role is configured by a big block of data describing all the sites you\nwant to run. Currently sites can either be statically served by NGINX, or\nreverse-proxied somewhere else, such as a process bound to some port on\nlocahost. The two types of site have the following main (required) options:\n\n```yaml\nsites:\n  - name: sample-static-site # A name used in a few comments/filenames etc. (Required)\n    type: static # `static` or `proxy` - whether the site is just on disk, or a reverse proxy (Required)\n    domain: demo.example.com # The domain the site should be served from - you'll have to sort DNS yourself (Required)\n    root: /var/www-data/something # For a static site, this is the location that the site's files are served from\n                                  # (Required for type: static)\n\n  - name: sample-proxy-site # A name used in a few comments/filenames etc. (Required)\n    type: proxy # `static` or `proxy` - whether the site is just on disk, or a reverse proxy (Required)\n    domain: demo.example.com # The domain the site should be served from - you'll have to sort DNS yourself (Required)\n    proxy_url: http://127.0.0.1:3000 # URL to proxy requests to, either localhost or remote (Required for type `proxy`)\n```\n\nThere are some additional options supported by both types of site:\n- `use_by_default`: Set this true for one site, to make it the one responded to by IP, Default: False\n- `allow_insecure`: Set this to allow the site to serve unencrypted (caution, security risk!). Default: False\n- `client_ca_cert`: Location of a CA cert that client certificates should be validated against - specifying makes client\n                    cert mandatory. Default: empty\n- `disable_csp`: Set to true to disable adding a default Content-Security-Policy header. Default: False\n- `disable_security_headers`: By default a set of headers are included from nginxconfig.io/security.conf to apply some\n                              opinionated security options, such as preventing access to dotfiles. Set this to turn\n                              those protections off if you need to. Default: False\n- `extra_config`: Any extra config lines to insert into this site's location block, although make sure you don't cause\n                  accidental security risks. Default: empty\n\nDependencies\n------------\n\nNone\n\nExample Playbook\n----------------\n\n```yaml\n- hosts: servers\n  roles:\n      - role: samdbmg.nginx-gateway\n        vars:\n          server_cert: /etc/ssl/certs/server-chain.cert\n          server_cert_key: /etc/ssl/private/server.key\n          sites:\n            webserver:\n              type: static\n              domain: example.com\n              root: /var/www-data\n            irc:\n              type: proxy\n              domain: irc.example.com\n              proxy_url: http://localhost:8081\n              client_ca_cert: /etc/client-ca.crt\n```\nLicense\n-------\n\nApache\n\nAuthor Information\n------------------\n\nSam Mesterton-Gibbons (@samdbmg)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsamdbmg%2Fansible-nginx-gateway","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsamdbmg%2Fansible-nginx-gateway","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsamdbmg%2Fansible-nginx-gateway/lists"}