1 files changed, 37 insertions, 0 deletions
diff --git a/roles/nginx/auth/sso/backend/tasks/main.yml b/roles/nginx/auth/sso/backend/tasks/main.yml
new file mode 100644
index 00000000..4d555d69
--- /dev/null
+++ b/roles/nginx/auth/sso/backend/tasks/main.yml
@@ -0,0 +1,37 @@
+---
+- name: install nginx-sso package
+  apt:
+    name: nginx-sso
+    state: present
+
+- name: create configuration directory
+  file:
+    path: /etc/nginx/auth/sso
+    state: directory
+
+- name: generate configuration file
+  loop: "{{ nginx_sso_backend_configs | dict2items }}"
+  loop_control:
+    label: "{{ item.key }}"
+  copy:
+    content: |
+      # ansible generated
+
+      {{ item.value | to_nice_yaml }}
+    dest: "/etc/nginx/auth/sso/{{ item.key }}.yml"
+    mode: 0400
+  notify: reload nginx-sso
+
+- name: generate systemd service unit
+  template:
+    src: nginx-sso@.service.j2
+    dest: /etc/systemd/system/nginx-sso@.service
+  notify: restart nginx-sso
+
+- name: make sure nginx-sso services are enabled and started
+  loop: "{{ nginx_sso_backend_configs | list }}"
+  systemd:
+    name: "nginx-sso@{{ item }}.service"
+    daemon_reload: yes
+    state: started
+    enabled: yes