---
# This role install nginx, configures it and sets up a Let's Encrypt certificate for the
# Mastodon instance

- name: Install nginx and letsencrypt
  apt: name={{ item }} state=latest update_cache=yes
  with_items:
     - nginx
     - letsencrypt
- name: Stop nginx for now
  service: name=nginx state=stopped
- name: Generate Let's Encrypt TLS certificate for Mastodon instance
  shell: letsencrypt certonly -n --agree-tos --standalone -d {{ mastodon_hostname }} --email "webmaster@{{ mastodon_hostname }}"
- name: Remove default nginx config in sites-enabled
  file:
    path: /etc/nginx/sites-enabled/default
    state: absent
- name: Copy Mastodon nginx vhost template to sites-available
  copy:
    src: mastodon-nginx.conf
    dest: /etc/nginx/sites-available/{{ mastodon_hostname }}.conf
    backup: yes
- name: Enable Mastodon nginx vhost template
  file:
    src: /etc/nginx/sites-available/{{ mastodon_hostname }}.conf
    dest: /etc/nginx/sites-enabled/{{ mastodon_hostname }}.conf
    state: link
- name: Start nginx
  service: name=nginx state=started