---
- name: 'add https configs to nginx'
  blockinfile:
    dest: '/etc/nginx/nginx.conf'
    block: |
      stream {
          map $ssl_preread_server_name $name {
              include /etc/nginx/map.conf.d/*.conf;
          }
          include /etc/nginx/upstream.conf.d/*.conf;

          log_format stream_routing '$remote_addr [$time_local] '
                                    'with SNI name "$ssl_preread_server_name" '
                                    'proxying to "$name" '
                                    '$protocol $status $bytes_sent $bytes_received '
                                    '$session_time';
          server {
              listen {{ public_ip }}:443;
               ssl_preread on;
               proxy_pass $name;
               # Pass original Client IP with PROXY PROTOCOL
               proxy_protocol on;
               access_log /var/log/nginx/stream_443.log stream_routing;
          }
      }
  delegate_to: 'reverse_proxy'
  notify: reload nginx

- name: 'add http configs to nginx'
  lineinfile:
    dest: '/etc/nginx/nginx.conf'
    insertafter: '^http {'
    line: 'include /etc/nginx/http.conf.d/*.conf;'
  delegate_to: 'reverse_proxy'
  notify: 'reload nginx'

- name: 'create the http.conf.d directory for nginx'
  file:
    state: 'directory'
    dest: '/etc/nginx/http.conf.d'
  delegate_to: 'reverse_proxy'
  notify: 'reload nginx'

- name: 'upload http to reverse proxy'
  template:
    src: 'http.j2'
    dest: '/etc/nginx/http.conf.d/http_{{ hostname }}.conf'
  delegate_to: 'reverse_proxy'
  notify: 'reload nginx'

- name: 'create the map.conf directory for nginx'
  file:
    state: 'directory'
    dest: '/etc/nginx/map.conf.d'
  delegate_to: 'reverse_proxy'
  notify: 'reload nginx'

- name: 'create the upstream.conf directory for nginx'
  file:
    state: 'directory'
    dest: '/etc/nginx/upstream.conf.d'
  delegate_to: 'reverse_proxy'
  notify: 'reload nginx'

- name: 'upload mappings to reverse proxy'
  template:
    src: 'map.j2'
    dest: '/etc/nginx/map.conf.d/map_{{ hostname }}.conf'
  delegate_to: 'reverse_proxy'
  notify: 'reload nginx'

- name: 'upload upstream to reverse proxy'
  template:
    src: 'upstream.j2'
    dest: '/etc/nginx/upstream.conf.d/upstream_{{ hostname }}.conf'
  delegate_to: 'reverse_proxy'
  notify: 'reload nginx'