| For a specific ansible role for nginx, suggest to look at https://github.com/nginxinc/ansible-role-nginx it is complete free, open source, not difficult to use, does not require any additional tools on the target host. On the control (source) host you just need ansible and target hosts need python3. And from there you can use this role to push nginx install on 10 or 100 target hosts (with same single command). The hosts do not have to run the same OS (they can run a mix Debian-based, or -redhat based Linuxes, and a FreeBSD.. I think (although did not try that) ). This role automatically setups and download the appropriate versions of nginx binaries, and allows pretty flexible config of nginx itself, from load balancers to reverse proxies, to plain-jane web servers... Any passwords that may need to be transmitted to target hosts (eg for cert files), are normally encrypted in crypto-secure ansible vault. So they get transferred with SSH over to the host, without being ever bein stored plain on the source/controller host. With regards to > Most automation scripts are used to sell additional products like Ansible so this script avoids that. I think most open source software, nginx including, can be though of as 'promoting' something or somebody. Just like any other endeavor that meant to be publicly consumed. |