Create generic rule for simple nginx reverse proxy

roles/simple-reverse-proxy/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+- name: Restart Nginx
+  become: true
+  ansible.builtin.systemd:
+    name: nginx.service
+    state: restarted

roles/simple-reverse-proxy/tasks/main.yml

@@ -0,0 +1,25 @@
+---
+- name: "Install certificate for {{ simple_reverse_proxy_internal_subdomain }}.kleinendorst.info"
+  become: true
+  ansible.builtin.command:
+    cmd: "register_certbot_domain.sh {{ simple_reverse_proxy_internal_subdomain }}.kleinendorst.info"
+    creates: "/etc/letsencrypt/live/{{ simple_reverse_proxy_internal_subdomain }}.kleinendorst.info" # The certificate directory
+- name: Set Nginx configuration
+  become: true
+  ansible.builtin.template:
+    src: nginx-configuration.conf.j2
+    dest: "/etc/nginx/conf.d/{{ simple_reverse_proxy_internal_subdomain }}.conf"
+    mode: '0644'
+  notify: Restart Nginx
+# - name: Allow https through firewall
+#   become: true
+#   community.general.ufw:
+#     rule: allow
+#     port: https
+#     proto: tcp
+#   notify: Restart ufw
+- name: Debug
+  ansible.builtin.debug:
+    msg: >-
+      Don't forget to manually add a DNS record for {{ simple_reverse_proxy_internal_subdomain }}.kleinendorst.info
+      pointing to: {{ ansible_facts['default_ipv4']['address'] }}.

roles/simple-reverse-proxy/templates/nginx-configuration.conf.j2

@@ -0,0 +1,23 @@
+server {
+  listen 443 ssl;
+  listen [::]:443 ssl;
+  server_name {{ simple_reverse_proxy_internal_subdomain }}.kleinendorst.info;
+
+  client_max_body_size 20M;
+
+  # SSL via Let's Encrypt
+  ssl_certificate       /etc/letsencrypt/live/{{ simple_reverse_proxy_internal_subdomain }}.kleinendorst.info/fullchain.pem; # managed by Certbot
+  ssl_certificate_key   /etc/letsencrypt/live/{{ simple_reverse_proxy_internal_subdomain }}.kleinendorst.info/privkey.pem; # managed by Certbot
+  ssl_protocols         TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
+  ssl_ciphers           HIGH:!aNULL:!MD5;
+
+  location / {
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header Host $host;
+
+    set $upstream_address 127.0.0.1;
+    set $upstream_port {{ simple_reverse_proxy_internal_port }};
+    set $upstream_proto http;
+    proxy_pass $upstream_proto://$upstream_address:$upstream_port;
+  }
+}