# playbooks/webservers.yml
---
- name: Configure web servers
  hosts: webservers
  become: true  # sudo

  vars:
    node_version: "20"
    app_user: "appuser"
    app_dir: "/opt/myapp"

  tasks:
    - name: Update apt cache
      apt:
        update_cache: yes
        cache_valid_time: 3600

    - name: Install required packages
      apt:
        name:
          - curl
          - git
          - nginx
          - ufw
        state: present

    - name: Create application user
      user:
        name: "{{ app_user }}"
        system: yes
        shell: /bin/false
        home: "{{ app_dir }}"

    - name: Create app directory
      file:
        path: "{{ app_dir }}"
        state: directory
        owner: "{{ app_user }}"
        mode: "0755"

    - name: Install Node.js
      shell: |
        curl -fsSL https://deb.nodesource.com/setup_{{ node_version }}.x | bash -
        apt-get install -y nodejs
      args:
        creates: /usr/bin/node  # idempotent — רק אם לא קיים

    - name: Copy nginx configuration
      template:
        src: nginx/myapp.conf.j2
        dest: /etc/nginx/sites-available/myapp
      notify: Reload nginx  # triggers handler

    - name: Enable nginx site
      file:
        src: /etc/nginx/sites-available/myapp
        dest: /etc/nginx/sites-enabled/myapp
        state: link

    - name: Start and enable nginx
      service:
        name: nginx
        state: started
        enabled: yes

  handlers:
    - name: Reload nginx
      service:
        name: nginx
        state: reloaded
Ansible — Configuration Management

Ansible — Configuration Management

Ansible — Configuration Management
