ansible可以使用 jinja2模板生成配置文件。并且可以使用if，for进行判断循环，进行逻辑处理。

    1. [root@k8s-master ansible]# 
    2. [root@k8s-master ansible]# tree conf_nginx
    3. conf_nginx
    4. ├── defaults
    5. │   └── main.yml
    6. ├── files
    7. ├── handlers
    8. │   └── main.yml
    9. ├── meta
    10. │   └── main.yml
    11. ├── README.md
    12. ├── tasks
    13. │   ├── main.yml
    14. │   └── template.yml
    15. ├── templates
    16. │   ├── domain.conf
    17. │   └── order.j2
    18. ├── tests
    19. │   ├── inventory
    20. │   └── test.yml
    21. └── vars
    22.     └── main.yml
    24. 8 directories, 11 files
    25. [root@k8s-master ansible]# 
    26. [root@k8s-master ansible]# cat conf_nginx.yml 
    27. ---
    28. - hosts: 127.0.0.1
    29.   user: root
    30.   gather_facts: false
    31.   roles:
    32.   - role: conf_nginx
    33. [root@k8s-master ansible]# cat conf_nginx/tasks/main.yml 
    34. ---
    35. # tasks file for conf_nginx
    36. - include: template.yml
    37. [root@k8s-master ansible]# cat conf_nginx/tasks/template.yml 
    38. - name: create {{ PROJECT }} directory
    39.   file: dest=/data/{{ PROJECT }} state=directory
    40. - name: template transfor java dir
    41.   template: src=order.j2 dest=/data/{{ PROJECT }}/order.conf
    42. - name: domain config 
    43.   template: src=domain.conf dest=/data/{{ PROJECT }}/domain.conf 
    44. [root@k8s-master ansible]# cat conf_nginx/templates/domain.conf 
    45. server {
    46.     listen 80;
    47.     listen 443 ssl;
    48.     server_name  www.domain.cn;
    50.     ssl_certificate /etc/letsencrypt/live/www.domain.cn/fullchain.pem;
    51.     ssl_certificate_key /etc/letsencrypt/live/www.domain.cn/privkey.pem;
    53.     access_log /data/nginx/access.log main;
    54.     error_log /data/nginx/error.log;
    56.     gzip  on;
    57.     gzip_comp_level 2;
    58.     gzip_vary on;
    59.     gzip_proxied any;
    60.     gzip_http_version 1.0;
    61.     gzip_types application/javascript text/css application/json;
    62.     client_header_buffer_size 128k;
    63.     client_max_body_size 500M;
    65. {% for url in nginx_location %}
    66.     location ^~ /{{ url.name }}/ {
    67. {% if url.rewrite is defined %}
    68.         rewrite /{{ url.rewrite }}(.*) $1 break;
    69. {% endif %}
    70.         proxy_set_header   Host    $host;
    71.         proxy_set_header   X-Real-IP   $remote_addr;
    72.         proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    73.         proxy_set_header   X-Real-PORT $remote_port;
    74.         client_max_body_size 1024m;
    75.         proxy_buffer_size 64k;
    76.         proxy_buffers   32 32k;
    77.         proxy_busy_buffers_size 128k;
    78. {% if url.timeout is defined %}
    79.         proxy_connect_timeout       {{ url.timeout }};
    80.         proxy_send_timeout      {{ url.timeout }};
    81.         proxy_read_timeout      {{ url.timeout }};
    82. {% else %}
    83.         proxy_connect_timeout       600s;
    84.         proxy_send_timeout      600s;
    85.         proxy_read_timeout      600s;
    86. {% endif%}
    87.         proxy_pass   {{ url.proxy }};
    88.     }
    89. {% endfor %}
    91. }
    92. [root@k8s-master ansible]# cat conf_nginx/vars/main.yml 
    93. ---
    94. # vars file for conf_nginx
    95. PROJECT: "JAVA"
    96. SWITCH: "NO"
    97. DBPORT: "8080"
    98. nginx_location:
    99. - { name: "bi-api", proxy: "https://bi.domain.com/" }
    100. - { name: "cc-api", proxy: "https://cc.domain.com/", timeout: "800s" }
    101. - { name: "iam-api", proxy: "https://iam.domain.com/", rewrite: "iam-api" }
    102. [root@k8s-master ansible]# 
    103. [root@k8s-master JAVA]# cat domain.conf 
    104. server {
    105.     listen 80;
    106.     listen 443 ssl;
    107.     server_name  www.domain.cn;
    109.     ssl_certificate /etc/letsencrypt/live/www.domain.cn/fullchain.pem;
    110.     ssl_certificate_key /etc/letsencrypt/live/www.domain.cn/privkey.pem;
    112.     access_log /data/nginx/access.log main;
    113.     error_log /data/nginx/error.log;
    115.     gzip  on;
    116.     gzip_comp_level 2;
    117.     gzip_vary on;
    118.     gzip_proxied any;
    119.     gzip_http_version 1.0;
    120.     gzip_types application/javascript text/css application/json;
    121.     client_header_buffer_size 128k;
    122.     client_max_body_size 500M;
    124.     location ^~ /bi-api/ {
    125.         proxy_set_header   Host    $host;
    126.         proxy_set_header   X-Real-IP   $remote_addr;
    127.         proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    128.         proxy_set_header   X-Real-PORT $remote_port;
    129.         client_max_body_size 1024m;
    130.         proxy_buffer_size 64k;
    131.         proxy_buffers   32 32k;
    132.         proxy_busy_buffers_size 128k;
    133.         proxy_connect_timeout       600s;
    134.         proxy_send_timeout      600s;
    135.         proxy_read_timeout      600s;
    136.         proxy_pass   https://bi.domain.com/;
    137.     }
    138.     location ^~ /cc-api/ {
    139.         proxy_set_header   Host    $host;
    140.         proxy_set_header   X-Real-IP   $remote_addr;
    141.         proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    142.         proxy_set_header   X-Real-PORT $remote_port;
    143.         client_max_body_size 1024m;
    144.         proxy_buffer_size 64k;
    145.         proxy_buffers   32 32k;
    146.         proxy_busy_buffers_size 128k;
    147.         proxy_connect_timeout       800s;
    148.         proxy_send_timeout      800s;
    149.         proxy_read_timeout      800s;
    150.         proxy_pass   https://cc.domain.com/;
    151.     }
    152.     location ^~ /iam-api/ {
    153.         rewrite /iam-api(.*) $1 break;
    154.         proxy_set_header   Host    $host;
    155.         proxy_set_header   X-Real-IP   $remote_addr;
    156.         proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    157.         proxy_set_header   X-Real-PORT $remote_port;
    158.         client_max_body_size 1024m;
    159.         proxy_buffer_size 64k;
    160.         proxy_buffers   32 32k;
    161.         proxy_busy_buffers_size 128k;
    162.         proxy_connect_timeout       600s;
    163.         proxy_send_timeout      600s;
    164.         proxy_read_timeout      600s;
    165.         proxy_pass   https://iam.domain.com/;
    166.     }
    168. }
    169. [root@k8s-master JAVA]#