Ansible Role: Proxy

Complete Proxy Server Role based on Traefik. This role installs and configures Traefik as a reverse proxy on Debian and Ubuntu systems.

Traefik is installed as a versioned directory under traefik_opt (e.g. /opt/traefik/traefik-v3.7.13-linux-amd64/), with {{ traefik_opt }}/traefik kept as a symlink to the active version's binary. This keeps the install idempotent — traefik_restart only fires when traefik_version actually changes — and old versioned downloads beyond traefik_keep_versions are pruned automatically.

Requirements

This role requires Ansible 2.12 or higher. The target system should be Debian or Ubuntu.

Role Variables

The following variables are defined in defaults/main.yml:

Variable	Description	Default Value
`traefik_name`	Name of the service and user	`traefik`
`traefik_version`	Traefik version to install	latest
`traefik_arch`	Release architecture to download	`amd64`
`traefik_keep_versions`	Number of old versioned installs to keep after pruning	`1`
`traefik_opt`	Installation directory	`/opt/{{ traefik_name }}`
`traefik_etc`	Configuration directory	`/etc/{{ traefik_name }}`
`traefik_conf_d`	Dynamic configuration directory	`{{ traefik_etc }}/conf.d`
`traefik_global_checkNewVersion`	Check for new versions	`false`
`traefik_global_sendAnonymousUsage`	Send anonymous usage data	`false`
`traefik_entrypoints`	Dictionary defining Traefik entrypoints	`{ web: { address: ':80' }, websecure: { address: ':443' } }`
`traefik_api`	Enable Traefik API	`false`
`traefik_api_dashboard`	Enable Traefik Dashboard	`false`
`traefik_api_insecure`	Enable insecure API access	`false`
`traefik_providers_file`	Enable file provider	`true`
`traefik_providers_file_directory`	Directory for dynamic configuration files	`/etc/traefik/conf.d/`
`traefik_providers_file_watch`	Watch for changes in dynamic configuration	`true`
`traefik_log_level`	Log level	`ERROR`
`traefik_log_format`	Log format	`common`
`traefik_metrics_prometheus`	Enable Prometheus metrics	`false`
`traefik_routing_http`	HTTP routing configuration dictionary	`{}`
`traefik_routing_tcp`	TCP routing configuration dictionary	`{}`
`traefik_routing_udp`	UDP routing configuration dictionary	`{}`
`traefik_routing_tls`	TLS routing configuration dictionary	`{}`

Dependencies

None.

Example Playbook

- hosts: proxy_servers
  roles:
     - role: ansible_role_proxy
       vars:
         traefik_api_dashboard: true
         traefik_routing_http:
           routers:
             my-router:
               rule: "Host(`example.com`)"
               service: my-service
           services:
             my-service:
               loadBalancer:
                 servers:
                   - url: "http://1.1.1.1:8080"

License

GPL-3.0-only

Author Information

Luciano Giacchetta
Giacchetta Networks LLC
https://github.com/gianet-us/ansible_role_proxy

Requirements​

Role Variables​

Dependencies​

Example Playbook​

License​

Author Information​