Optional HTTP Basic auth for discourse

tasks/apache.yml

@@ -15,3 +15,16 @@
   command: a2ensite discourse creates=/etc/apache2/sites-enabled/discourse{{ apache_conf_ext }}
   notify:
     - "Apache | Restart Apache"
+
+- block:
+
+  - name: "Setup AuthType Basic"
+    htpasswd:
+      path: '/var/discourse/containers/passwords'
+      name: '{{ discourse_apache_auth.user }}'
+      password: '{{ discourse_apache_auth.password }}'
+      owner: 'root'
+      group: 'root'
+      mode: '664'
+
+  when: discourse_apache_auth is defined

tasks/install.yml

 ---
 # file: roles/discourse/tasks/install.yml
 
-- name: "Configure Apache"
-  include_tasks: apache.yml
-  tags: 'always'
-
 - name: "Clone Repository"
   git:
     accept_hostkey: yes
@@ -26,3 +22,7 @@
     shell: '/var/discourse/launcher rebuild app'
 
   when: discourse_repository.changed
+
+- name: "Configure Apache"
+  include_tasks: apache.yml
+  tags: 'always'

templates/vhost.conf

@@ -40,9 +40,16 @@
   AllowEncodedSlashes NoDecode
 
   <Location />
-      Require all granted
-      ProxyPassReverse http://127.0.0.1:8181
-      ProxyPassReverse http://{{ discourse_domain }}/
+{% if discourse_apache_auth is defined %}
+    AuthType {{ discourse_apache_auth.type }}
+    AuthName "{{ discourse_apache_auth.name }}"
+    AuthUserFile /var/discourse/containers/passwords
+    Require {{ discourse_apache_auth.user }} {{ discourse_apache_auth.password }}
+{% else %}
+    Require all granted
+{% endif %}
+    ProxyPassReverse http://127.0.0.1:8181
+    ProxyPassReverse http://{{ discourse_domain }}/
   </Location>
 
   RewriteEngine on