commit f5c4218bc269c05493ff256c1a274164b97a98a6
Author: Markus Katharina Brechtel <markus.katharina.brechtel@thengo.net>
Date:   Wed Jun 21 20:25:58 2017 +0000

    initial

diff --git a/defaults/main.yml b/defaults/main.yml
new file mode 100644
index 0000000..79d98da
--- /dev/null
+++ b/defaults/main.yml
@@ -0,0 +1,3 @@
+nginx_worker_processes: 4
+nginx_worker_connections: 768
+nginx_redirect_to_https: false
diff --git a/handlers/main.yml b/handlers/main.yml
new file mode 100644
index 0000000..8130a20
--- /dev/null
+++ b/handlers/main.yml
@@ -0,0 +1,11 @@
+---
+
+- name: restart nginx
+  service:
+    name: nginx
+    state: restarted
+
+- name: reload nginx
+  service:
+    name: nginx
+    state: reloaded
diff --git a/tasks/main.yml b/tasks/main.yml
new file mode 100644
index 0000000..45fe2f5
--- /dev/null
+++ b/tasks/main.yml
@@ -0,0 +1,15 @@
+---
+
+- include: setup_Debian.yml
+
+- name: nginx.conf
+  template:
+    src: nginx.conf.j2
+    dest: /etc/nginx/nginx.conf
+  notify: reload nginx
+
+- name: default vhost
+  template:
+    src: default-vhost.j2
+    dest: /etc/nginx/sites-available/default
+  notify: reload nginx
diff --git a/tasks/setup_Debian.yml b/tasks/setup_Debian.yml
new file mode 100644
index 0000000..8d34949
--- /dev/null
+++ b/tasks/setup_Debian.yml
@@ -0,0 +1,14 @@
+---
+
+- name: install apt packages
+  apt:
+    pkg: "{{item}}"
+    state: present
+  with_items:
+    - nginx
+    - nginx-full
+
+- name: remove default page
+  file:
+    path: /var/www/html/index.nginx-debian.html
+    state: absent
diff --git a/templates/default-vhost.j2 b/templates/default-vhost.j2
new file mode 100644
index 0000000..0b051a8
--- /dev/null
+++ b/templates/default-vhost.j2
@@ -0,0 +1,13 @@
+server {
+        listen 80 default_server;
+        listen [::]:80 default_server;
+
+        server_name _;
+
+        return 404;
+
+        location /.well-known/acme-challenge {
+                default_type "text/plain";
+                root /var/www/letsencrypt-auto;
+        }
+}
diff --git a/templates/nginx.conf.j2 b/templates/nginx.conf.j2
new file mode 100644
index 0000000..e6d1250
--- /dev/null
+++ b/templates/nginx.conf.j2
@@ -0,0 +1,63 @@
+user www-data;
+worker_processes {{ nginx_worker_processes }};
+pid /run/nginx.pid;
+
+events {
+        worker_connections {{ nginx_worker_connections }};
+        # multi_accept on;
+}
+
+http {
+
+        ##
+        # Basic Settings
+        ##
+
+        sendfile on;
+        tcp_nopush on;
+        tcp_nodelay on;
+        keepalive_timeout 65;
+        types_hash_max_size 2048;
+        server_tokens off;
+
+        server_names_hash_bucket_size 64;
+        # server_name_in_redirect off;
+
+        include /etc/nginx/mime.types;
+        default_type application/octet-stream;
+
+        ##
+        # SSL Settings
+        ##
+
+        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
+        ssl_prefer_server_ciphers on;
+
+        ##
+        # Logging Settings
+        ##
+
+        access_log /var/log/nginx/access.log;
+        error_log /var/log/nginx/error.log;
+
+        ##
+        # Gzip Settings
+        ##
+
+        gzip on;
+        gzip_disable "msie6";
+
+        # gzip_vary on;
+        # gzip_proxied any;
+        # gzip_comp_level 6;
+        # gzip_buffers 16 8k;
+        # gzip_http_version 1.1;
+        # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+
+        ##
+        # Virtual Host Configs
+        ##
+
+        include /etc/nginx/conf.d/*.conf;
+        include /etc/nginx/sites-enabled/*;
+}