r/minio-nginx: Reverse proxy for MinIO

The *minio-nginx* role configures nginx to proxy for MinIO.  It uses the
"subdomain" pattern, as described in [Configure NGINX Proxy for MinIO
Server][0]; the S3 API and the console UI are accessible through
different domain names.

[0]: https://min.io/docs/minio/linux/integrations/setup-nginx-proxy-with-minio.html

roles/minio-nginx/tasks/main.yml

@@ -0,0 +1,37 @@
+- name: ensure nginx is configured to proxy for minio
+  template:
+    src: minio.nginx.conf.j2
+    dest: /etc/nginx/default.d/minio.conf
+    owner: root
+    group: root
+    mode: u=rw,go=r
+  notify:
+  - reload nginx
+  tags:
+  - config
+  - nginx-config
+  - minio-nginx
+  - minio-backend
+
+- name: ensure nginx is configured to proxy for minio console
+  template:
+    src: minio-console.nginx.conf.j2
+    dest: /etc/nginx/conf.d/minio-console.conf
+    owner: root
+    group: root
+    mode: u=rw,go=r
+  notify:
+  - reload nginx
+  tags:
+  - config
+  - nginx-config
+  - minio-nginx
+  - minio-console
+
+- name: ensure selinux allows nginx to proxy
+  seboolean:
+    name: httpd_can_network_connect
+    persistent: true
+    state: true
+  tags:
+  - selinux