nginx: add support for stream proxies

3 files changed, 28 insertions, 0 deletions

diff --git a/roles/nginx/base/defaults/main.yml b/roles/nginx/base/defaults/main.yml
index 2cd84e5a..9dd53cdf 100644
--- a/roles/nginx/base/defaults/main.yml
+++ b/roles/nginx/base/defaults/main.yml
@@ -12,3 +12,5 @@ nginx_snippets:
   - proxy-forward-headers
 
 nginx_dhparam_size: 2048
+
+nginx_stream_module: no
diff --git a/roles/nginx/base/tasks/main.yml b/roles/nginx/base/tasks/main.yml
index a434b708..b0e7df5b 100644
--- a/roles/nginx/base/tasks/main.yml
+++ b/roles/nginx/base/tasks/main.yml
@@ -29,3 +29,7 @@
     path: /etc/ssl/dhparams.pem
     size: "{{ nginx_dhparam_size }}"
   notify: restart nginx
+
+- name: install and setup stream module
+  when: nginx_stream_module
+  import_tasks: stream.yml
diff --git a/roles/nginx/base/tasks/stream.yml b/roles/nginx/base/tasks/stream.yml
new file mode 100644
index 00000000..2fddbddb
--- /dev/null
+++ b/roles/nginx/base/tasks/stream.yml
@@ -0,0 +1,22 @@
+---
+- name: install nginx stream module
+  apt:
+    name: libnginx-mod-stream
+
+- name: create directories for stream config files
+  loop:
+    - available
+    - enabled
+  file:
+    path: "/etc/nginx/streams-{{ item }}"
+    state: directory
+
+- name: add stream config section
+  blockinfile:
+    path: /etc/nginx/nginx.conf
+    block: |
+      stream {
+      	include /etc/nginx/streams-enabled/*;
+      }
+    marker: "# streams: {mark} ansible managed block"
+  notify: restart nginx