Enhance nginx config for better troubleshooting

joelj1995 · Oct 7, 2023 · abb222d · abb222d
1 parent 6549900
commit abb222d
Show file tree

Hide file tree

Showing 3 changed files with 76 additions and 5 deletions.
diff --git a/cicd/Ansible-Playbook-Gateway-Configure.yml b/cicd/Ansible-Playbook-Gateway-Configure.yml
@@ -5,4 +5,9 @@
         name: '{{ inventory_hostname }}'
 
     - name: install nginx
-      apt: name=nginx
+      apt: name=nginx
+
+    - name: Remove default site
+      file:
+        path: "/etc/nginx/sites-enabled/default"
+        state: absent
diff --git a/gateway/joeljca.site.blue b/gateway/joeljca.site.blue
@@ -1,6 +1,11 @@
 server {
-    listen 80;
-    listen [::]:80;
+    listen 80 default_server;
+    server_name www.joelj.ca joelj.ca;
+    return 301 https://www.joelj.ca$request_uri;
+}
+
+server {
+    add_header X-Origin-LB $hostname;
 
     # SSL configuration
     #
@@ -13,4 +18,32 @@ server {
     location / {
         proxy_pass http://joeljcablue;
     }
+}
+
+server {
+    # SSL configuration
+    #
+    listen 443 ssl;
+    ssl_certificate /etc/ssl/certs/joeljca-2022.crt;
+    ssl_certificate_key /etc/ssl/certs/joeljca-2022.rsa;
+
+    server_name wwwblue.joelj.ca;
+
+    location / {
+        proxy_pass http://joeljcablue;
+    }
+}
+
+server {
+    # SSL configuration
+    #
+    listen 443 ssl;
+    ssl_certificate /etc/ssl/certs/joeljca-2022.crt;
+    ssl_certificate_key /etc/ssl/certs/joeljca-2022.rsa;
+
+    server_name wwwgreen.joelj.ca;
+
+    location / {
+        proxy_pass http://joeljcagreen;
+    }
 }
diff --git a/gateway/joeljca.site.green b/gateway/joeljca.site.green
@@ -1,6 +1,11 @@
 server {
-    listen 80;
-    listen [::]:80;
+    listen 80 default_server;
+    server_name www.joelj.ca joelj.ca;
+    return 301 https://www.joelj.ca$request_uri;
+}
+
+server {
+    add_header X-Origin-LB $hostname;
 
     # SSL configuration
     #
@@ -10,6 +15,34 @@ server {
 
     server_name www.joelj.ca joelj.ca;
 
+    location / {
+        proxy_pass http://joeljcagreen;
+    }
+}
+
+server {
+    # SSL configuration
+    #
+    listen 443 ssl;
+    ssl_certificate /etc/ssl/certs/joeljca-2022.crt;
+    ssl_certificate_key /etc/ssl/certs/joeljca-2022.rsa;
+
+    server_name wwwblue.joelj.ca;
+
+    location / {
+        proxy_pass http://joeljcablue;
+    }
+}
+
+server {
+    # SSL configuration
+    #
+    listen 443 ssl;
+    ssl_certificate /etc/ssl/certs/joeljca-2022.crt;
+    ssl_certificate_key /etc/ssl/certs/joeljca-2022.rsa;
+
+    server_name wwwgreen.joelj.ca;
+
     location / {
         proxy_pass http://joeljcagreen;
     }