I am currently doing a lot of work with Ansible, AWX, Ansible Tower and Red Hat Satellite to automate and manage a RHEL 6, RHEL 7 and RHEL 8 environment. Location /favicon.Updated 31 December 2020 with additional resources such as provisioning and configuring VMs with Ansible Workflows. # HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)Īdd_header Strict-Transport-Security max-age=15768000 Ssl_certificate_key /var/lib/awx-ssl/nginx-selfsigned.key Ssl_certificate /var/lib/awx-ssl/nginx-selfsigned.crt # If you have a domain name, this is where to add it ‘”$http_user_agent” “$http_x_forwarded_for”‘ ‘$status $body_bytes_sent “$http_referer” ‘ Log_format main ‘$remote_addr – $remote_user “$request” ‘ The configuration file should look as follows: Copy the nf configuration file to /var/lib/awx-ssl. Copy the certificates (key and crt) to /var/lib/awx-sslĦ. Create the directory for the volume on the host:ĥ. – ‘/var/lib/awx/projects:/var/lib/awx/projects:rw’Ĥ. Vim +77 awx/installer/roles/local_docker/tasks/standalone.yml Modify the standalone.yml playbook and replace the volumes configuration: Modify the inventory file as indicated below (only changes listed below):Īwx_alternate_dns_servers=”10.1.2.3,10.2.3.4,add_your_own”ģ. Follow the procedure to download awx from git (git clone )Ģ. It is not the most elegant way of hacking AWX, but it works and checks all the boxes.ġ. After researching the topic for some time and going through several solutions that involved building proxies or redirecting encrypted traffic to the AWX, I decided to give it a crack and this is the outcome. Unfortunately, the AWX project does not come with the SSL protected GUI.

I was recently doing some work for one of our customers who (as most customers) have the requirement to protect everything. I created this blog for those who would like to use the marvels of the Ansible Tower without paying a penny and at the same time would like to have a modern and secure way to access the awx portal. The AWX project is the fulfillment of that promise. Being Red Hat – they promised to open the code of the Ansible Tower. Some time ago Red Hat acquired Ansible Inc – the company responsible for Ansible Tower.

How to install gitlab server from awx