Serve http with nginx in front of graylog server

graylog listens on localhost port 9000, so put nginx in front of it
so we get something safe and stable listening on port 80 to save
graylog itself running as root to listen on a privileged port

files/nginx.conf

+# Managed by ansible
+server {
+	listen 80;
+	server_name _;
+	location / {
+		access_log off;
+		proxy_pass http://localhost:9000;
+		proxy_set_header X-Real-IP $remote_addr;
+		proxy_set_header Host $host;
+		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+	}
+}

handlers/main.yml

@@ -14,6 +14,12 @@
     enabled: yes
     state: restarted
 
+- name: restart nginx
+  service:
+    name: nginx
+    enabled: True
+    state: restarted
+
 - name: restart graylog
   service:
     name: graylog-server

tasks/main.yml

@@ -46,6 +46,19 @@
   notify:
     - restart elasticsearch
 
+- name: install nginx
+  package:
+    name: nginx
+  notify:
+    - restart nginx
+
+- name: configure nginx
+  copy:
+    src: nginx.conf
+    dest: /etc/nginx/sites-available/default
+  notify:
+    - restart nginx
+
 - name: graylog apt repo
   apt:
     deb: "https://packages.graylog2.org/repo/packages/graylog-3.2-repository_latest.deb"