draft for a role to provide reverse proxy with SNI

roles/reverse_proxy/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+# possibili nome macchina
+# ansible_nodename
+# ansible_hostname
+- name: Upload reverse proxy configuration
+  template:
+    src: reverse_proxy.j2
+    dest: "/etc/nginx/nginx.conf.d/{{ nome_macchina }}.conf"
+

roles/reverse_proxy/templates/reverse_proxy.j2

@@ -0,0 +1,14 @@
+stream {
+	map $ssl_preread_server_name $name {
+		default original_dest;
+		{{ nome_macchina }}.lilik.it {{ nome_macchina }}_https;
+	}
+
+	upstream original_dest {
+		server 192.168.15.2:443;
+	}
+
+	upstream {{ nome_macchina }}_https {
+		server {{ hostvars[nome_macchina]['ansible_host'] }}:443;
+	}
+}