Change default NGINX App Protect conf path for 3.2 (#82)

Author: aknot242

CHANGELOG.md

@@ -4,6 +4,7 @@
 
 ENHANCEMENTS:
 
+*   Changing the default policy directory from `/etc/nginx` to `/etc/app_protect/conf` to align with this change introduced in App Protect 3.2.
 *   Update Ansible base to `2.10.8`, Ansible Lint to `5.0.7`, yamllint to `1.26.1` and Docker Python SDK to `5.0.0`.
 *   Update the Ansible `community.general` collection to `2.5.1` and `community.docker` collection to `1.5.0`.
 

defaults/main.yml

@@ -75,7 +75,7 @@ nginx_app_protect_security_policy_template_enable: true
 nginx_app_protect_security_policy_template:
   template_file: app-protect-security-policy.j2
   out_file_name: app-protect-security-policy.json
-  out_file_location: /etc/nginx/
+  out_file_location: /etc/app_protect/conf/
 # possible values: transparent, blocking
 nginx_app_protect_security_policy_enforcement_mode: transparent
 
@@ -85,7 +85,7 @@ nginx_app_protect_log_policy_template_enable: true
 nginx_app_protect_log_policy_template:
   template_file: app-protect-log-policy.j2
   out_file_name: app-protect-log-policy.json
-  out_file_location: /etc/nginx/
+  out_file_location: /etc/app_protect/conf/
 # possible values: all, illegal, blocked
 nginx_app_protect_log_policy_filter_request_type: all
 
@@ -104,9 +104,9 @@ nginx_app_protect_log_policy_target: "syslog:server={{ nginx_app_protect_log_pol
 # Copy local NGINX App Protect security policy to host
 nginx_app_protect_security_policy_file_enable: false
 nginx_app_protect_security_policy_file_src: files/config/security-policy.json
-nginx_app_protect_security_policy_file_dest: /etc/nginx/security-policy.json
+nginx_app_protect_security_policy_file_dest: /etc/app_protect/conf/security-policy.json
 
 # Copy local NGINX App Protect log policy to host
 nginx_app_protect_log_policy_file_enable: false
 nginx_app_protect_log_policy_file_src: files/config/log-policy.json
-nginx_app_protect_log_policy_file_dest: /etc/nginx/log-policy.json
+nginx_app_protect_log_policy_file_dest: /etc/app_protect/conf/log-policy.json

molecule/default/verify.yml

@@ -47,12 +47,12 @@
 
     - name: Check that the security policy exists
       stat:
-        path: /etc/nginx/app-protect-security-policy.json
+        path: /etc/app_protect/conf/app-protect-security-policy.json
       register: stat_result
       failed_when: not stat_result.stat.exists
 
     - name: Check that the log policy exists
       stat:
-        path: /etc/nginx/app-protect-log-policy.json
+        path: /etc/app_protect/conf/app-protect-log-policy.json
       register: stat_result
       failed_when: not stat_result.stat.exists