temp directory variable

Author: magicalyak

defaults/main.yml

@@ -32,6 +32,9 @@ nginx_start: true
 # Increase NGINX service timeout to accomdate ruleset loading from default 90s
 nginx_timeout: 180
 
+# App Protect Temporary Directory to use (Default: /opt/app_protect/tmp)
+app_protect_tempdir: /opt/app_protect/tmp
+
 # Choose where to fetch the NGINX App Protect signing key from.
 # Default is the official NGINX App Protect signing key host.
 # app_protect_signing_key: https://cs.nginx.com/static/keys/app-protect.key

tasks/prerequisites/setup-selinux.yml

@@ -94,43 +94,43 @@
 - name: "(Install: SELinux: Module) Create NGINX Plus App Protect Module"
   template:
     src: nginx-plus-module-appprotect.te.j2
-    dest: /opt/app_protect/tmp/nginx-plus-module-appprotect.te
+    dest: "{{ app_protect_tempdir }}/nginx-plus-module-appprotect.te"
 
 - name: "(Install: SELinux: Module) Check NGINX Plus App Protect Module"
-  command: checkmodule -M -m -o /opt/app_protect/tmp/nginx-plus-module-appprotect.mod /opt/app_protect/tmp/nginx-plus-module-appprotect.te
+  command: "checkmodule -M -m -o {{ app_protect_tempdir }}/nginx-plus-module-appprotect.mod {{ app_protect_tempdir }}/nginx-plus-module-appprotect.te"
   args:
-    creates: /opt/app_protect/tmp/nginx-plus-module-appprotect.mod
+    creates: "{{ app_protect_tempdir }}/nginx-plus-module-appprotect.mod"
   changed_when: false
 
 - name: "(Install: SELinux: Module) Compile NGINX Plus App Protect Module"
-  command: semodule_package -o /opt/app_protect/tmp/nginx-plus-module-appprotect.pp -m /opt/app_protect/tmp/nginx-plus-module-appprotect.mod
+  command: "semodule_package -o {{ app_protect_tempdir }}/nginx-plus-module-appprotect.pp -m {{ app_protect_tempdir }}/nginx-plus-module-appprotect.mod"
   args:
-    creates: /opt/app_protect/tmp/nginx-plus-module-appprotect.pp
+    creates: "{{ app_protect_tempdir }}/nginx-plus-module-appprotect.pp"
   changed_when: false
 
 - name: "(Install: SELinux: Module) Import NGINX Plus App Protect Module"
-  command: semodule -i /opt/app_protect/tmp/nginx-plus-module-appprotect.pp
+  command: "semodule -i {{ app_protect_tempdir }}/nginx-plus-module-appprotect.pp"
   changed_when: false
 
 - name: "(Install: SELinux: Module) Create NGINX Plus Metrics Module"
   template:
     src: nginx-plus-module-f5-metrics.te.j2
-    dest: /opt/app_protect/tmp/nginx-plus-module-f5-metrics.te
+    dest: "{{ app_protect_tempdir }}/nginx-plus-module-f5-metrics.te"
 
 - name: "(Install: SELinux: Module) Check NGINX Plus Metrics Module"
-  command: checkmodule -M -m -o /opt/app_protect/tmp/nginx-plus-module-f5-metrics.mod /opt/app_protect/tmp/nginx-plus-module-f5-metrics.te
+  command: "checkmodule -M -m -o {{ app_protect_tempdir }}/nginx-plus-module-f5-metrics.mod {{ app_protect_tempdir }}/nginx-plus-module-f5-metrics.te"
   args:
-    creates: /opt/app_protect/tmp/nginx-plus-module-f5-metrics.mod
+    creates: "{{ app_protect_tempdir }}/nginx-plus-module-f5-metrics.mod"
   changed_when: false
 
 - name: "(Install: SELinux: Module) Compile NGINX Plus Metrics Module"
-  command: semodule_package -o /opt/app_protect/tmp/nginx-plus-module-f5-metrics.pp -m /opt/app_protect/tmp/nginx-plus-module-f5-metrics.mod
+  command: "semodule_package -o {{ app_protect_tempdir }}/nginx-plus-module-f5-metrics.pp -m {{ app_protect_tempdir }}/nginx-plus-module-f5-metrics.mod"
   args:
-    creates: /opt/app_protect/tmp/nginx-plus-module-f5-metrics.pp
+    creates: "{{ app_protect_tempdir }}/nginx-plus-module-f5-metrics.pp"
   changed_when: false
 
 - name: "(Install: SELinux: Module) Import NGINX Plus Metrics Module"
-  command: semodule -i /opt/app_protect/tmp/nginx-plus-module-f5-metrics.pp
+  command: "semodule -i {{ app_protect_tempdir }}/nginx-plus-module-f5-metrics.pp"
   changed_when: false
 
 - name: "(Install: SELinux) Enforce SELinux"