iiab/roles/nginx/tasks/install.yml

- name: Install nginx required and helper packages
  package: name={{ item }} state=present
  with_items:
    - nginx-extras
    - uwsgi
    - uwsgi-plugin-python3
    - php-fpm
    - libnginx-mod-http-subs-filter

- name: Add http server user to shadow group, so it can authenticate Admin Console
  user:
    name: "{{ apache_user }}"
    groups: shadow

- name: Remove the nginx default config
  file:
    path: /etc/nginx/sites-enabled/default
    state: absent

- name: Put config files in place (2 into /etc/nginx, 1 into /etc/{{ apache_service }})
  template:
      src: '{{ item.src}}'
      dest: '{{ item.dest }}'
  with_items:
    - { src: "roles/nginx/templates/server.conf", dest: "/etc/nginx/" }
    - { src: "roles/nginx/templates/nginx.conf", dest: "/etc/nginx/" }
    - { src: 'roles/nginx/templates/ports.conf', dest: '/etc/{{ apache_service }}/' , mode: '0644' }
    - { src: 'roles/nginx/templates/uwsgi.service', dest: '/etc/systemd/system/' , mode: '0644' }

- name: Let uwsgi running as {{ apache_user }} write log files
  file: 
      path: /var/log/uwsgi/app
      state: directory
      owner: "{{ apache_user }}"