init

Jenkinsfile

@@ -0,0 +1,20 @@
+pipeline {
+    agent any
+    parameters {
+        string(name: "target_host", defaultValue: "", trim: true, description: "Target host")
+        string(name: "username", defaultValue: "", trim: true, description: "Ansible user")
+        password(name: "password", defaultValue: "", description: "Ansible password")
+    }
+    stages {
+        stage('Download') {
+            steps {
+                git branch: 'master', url:'${git_url}/Ansible/rproxy.git', credentialsId: 'git'
+            }
+        }
+        stage('Run') {
+            steps {
+                sh 'ansible-playbook rproxy.yml -i ${target_host}, -u ${username} -e "ansible_password=${password}"'
+            }
+        }
+    }
+}

ansible.cfg

@@ -0,0 +1,6 @@
+[defaults]
+hostfile = hosts.ini
+log_path = ansible-log.log
+host_key_checking = false
+interpreter_python = /usr/bin/python3
+forks = 30

roles/rproxy/files/nginx.conf

@@ -0,0 +1,33 @@
+load_module modules/ngx_http_headers_more_filter_module.so;
+user  nginx;
+worker_processes  auto;
+
+error_log  /var/log/nginx/error.log notice;
+pid        /var/run/nginx.pid;
+
+
+events {
+    worker_connections  1024;
+}
+
+
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile        on;
+    #tcp_nopush     on;
+
+    keepalive_timeout  65;
+
+    #gzip  on;
+
+    include /etc/nginx/sites/*.conf;
+    server_tokens off;
+}

roles/rproxy/tasks/main.yml

@@ -0,0 +1,46 @@
+---
+- name: Get domain
+  ansible.builtin.shell:
+    cmd: hostname -d
+  register: domain
+
+- name: Install dependencies
+  ansible.builtin.apt:
+    name:
+      - docker.io
+      - docker-compose
+    update_cache: yes
+
+- name: Remove rproxy dir
+  ansible.builtin.file:
+    path: {{ rproxy_dir }}
+    state: absent
+
+- name: Create rproxy dir
+  ansible.builtin.file:
+    path: {{ rproxy_dir }}
+    state: directory
+
+- name: Create sites dir
+  ansible.builtin.file:
+    path: "{{ rproxy_dir }}/sites"
+    state: directory
+
+- name: Copy docker-compose
+  ansible.builtin.template:
+    src: templates/docker-compose.yml.j2
+    dest: "{{ rproxy_dir }}/docker-compose.yml"
+
+- name: Copy nginx.conf
+  ansible.builtin.copy:
+    src: files/nginx.conf
+    dest: "{{ rproxy_dir }}/nginx.conf"
+
+- name: Copy server.conf
+  ansible.builtin.template:
+    src: templates/server.conf.j2
+    dest: "{{ rproxy_dir }}/sites/server.conf"
+
+- name: Start rproxy
+  community.docker.docker_compose:
+    project_src: "{{ rproxy_dir }}"

roles/rproxy/templates/docker-compose.yml.j2

@@ -0,0 +1,16 @@
+version: '3.3'
+
+services:
+  nginx:
+    image: nginx:latest
+    container_name: nginx
+    restart: always
+    volumes:
+      - {{ rproxy_dir }}/nginx.conf:/etc/nginx/nginx.conf
+      - {{ rproxy_dir }}/sites:/etc/nginx/sites
+      - {{ rproxy_dir }}/sites/default.conf:/etc/nginx/conf.d/default.conf
+      - {{ rproxy_dir }}/{{ domain.stdout }}.crt:/etc/nginx/{{ domain.stdout }}.crt
+      - {{ rproxy_dir }}/{{ domain.stdout }}.key:/etc/nginx/{{ domain.stdout }}.key
+    ports:
+      - 443:443
+      - 80:80

roles/rproxy/templates/server.conf.j2

@@ -0,0 +1,32 @@
+{% for rproxy_service in rproxy_service_list %}
+server {
+    listen 80;
+    server_name {{ rproxy_service }}.{{ domain.stdout }};
+    access_log /var/log/nginx/{{ rproxy_service }}.access.log;
+    error_log /var/log/nginx/{{ rproxy_service }}.error.log;
+    return 301 https://$server_name$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name {{ rproxy_service }}.{{ domain.stdout }};
+    access_log /var/log/nginx/{{ rproxy_service }}.access.log;
+    error_log /var/log/nginx/{{ rproxy_service }}.error.log;
+    ssl_certificate /etc/nginx/{{ domain.stdout }}.crt;
+    ssl_certificate_key /etc/nginx/{{ domain.stdout }}.key;
+    ssl_protocols TLSv1.2;
+    ssl_ciphers EECDH:+AES256:-3DES:!RSA+AES:!RSA+3DES:!NULL:!RC4;
+    ssl_prefer_server_ciphers on;
+    proxy_connect_timeout 600s;
+    fastcgi_request_buffering off;
+    fastcgi_buffers 64 4K;
+    location / {
+        proxy_pass_header Server;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_pass https://{{ rproxy_service }}.{{ domain.stdout }}/;
+     }
+}
+{% endfor %}

rproxy.yml

@@ -0,0 +1,11 @@
+---
+- hosts: all
+  become: yes
+
+  vars:
+    ansible_python_interpreter: /usr/bin/python3
+    rproxy_dir: /opt/rproxy
+    rproxy_service_list: [jenkins]
+  
+  roles:
+    - rproxy