feat: Config NGINX Plus HA keepalived

add config

Author: alessfg

defaults/main/keepalived.yml

@@ -1,2 +1,9 @@
 ---
 nginx_keepalived_conf_enable: false
+nginx_keepalived_conf:
+  - virtual_router_id: 1
+    primary_dev: eth0
+    priority: 101
+    primary_ip: 192.168.100.100
+    secondary_ip: 192.168.100.101
+    cluster_ip: 192.168.100.150

handlers/main.yml

@@ -66,3 +66,9 @@
     - logrotate_check['stderr_lines'] != []
     - logrotate_check['rc'] != 0
   listen: (Handler) Run logrotate
+
+- name: (Handler) Start NGINX Plus HA keepalived
+  ansible.builtin.service:
+    name: keepalived
+    state: restarted
+    enabled: true

tasks/modules/install-keepalived.yml

@@ -6,3 +6,12 @@
   when:
     - ansible_facts['os_family'] == 'Alpine'
     - ansible_facts['distribution'] == 'Amazon'
+
+- name: Configure NGINX Plus keepalived HA
+  ansible.builtin.template:
+    src: keepalived/keepalived.conf.tmpl.j2
+    dest: /etc/keepalived/keepalived.conf
+    mode: "0644"
+  when:
+    - ansible_facts['os_family'] == 'Alpine'
+    - ansible_facts['distribution'] == 'Amazon'

templates/keepalived/keepalived.conf.tmpl.j2

@@ -0,0 +1,41 @@
+{{ ansible_managed | comment }}
+
+global_defs {
+    vrrp_version 3
+}
+
+vrrp_script chk_manual_failover {
+    script "/usr/lib/keepalived/nginx-ha-manual-failover"
+    interval 10
+    weight 50
+}
+
+vrrp_script chk_nginx_service {
+    script "/usr/lib/keepalived/nginx-ha-check"
+    interval 3
+    weight 50
+}
+
+{% for vrrp in nginx_keepalived_conf %}
+vrrp_instance VI_{{ vrrp['virtual_router_id'] }} {
+    interface {{ vrrp['primary_dev'] }}
+    priority {{ vrrp['priority'] }}
+    virtual_router_id {{ vrrp['virtual_router_id'] }}
+    advert_int 1
+    accept
+    garp_master_refresh 5
+    garp_master_refresh_repeat 1
+    unicast_src_ip {{ vrrp['primary_ip'] }}
+    unicast_peer {
+        {{ vrrp['secondary_ip'] }}
+    }
+    virtual_ipaddress {
+        {{ vrrp['cluster_ip'] }}
+    }
+    track_script {
+        chk_nginx_service
+        chk_manual_failover
+    }
+    notify "/usr/lib/keepalived/nginx-ha-notify"
+}
+{% endfor %}