library/roles/apache: manage the installation of the rpaf module.

apache/defaults/main.yml

@@ -26,6 +26,9 @@ apache_worker_modules:
   - { name: 'mpm_prefork', state: 'absent' }
   - { name: 'mpm_{{ apache_mpm_mode }}', state: 'present' }
 
+# apache RPAF is needed to obtain the real client addresses when behind a reverse proxy
+apache_rpaf_install: False
+
 apache_default_modules:
   - headers
   - rewrite

apache/tasks/apache-modules.yml

@@ -1,4 +1,15 @@
 ---
+- name: Install the libapache2-mod-rpaf module
+  apt: pkg=libapache2-mod-rpaf state=present
+  when: apache_rpaf_install
+  tags: [ 'apache', 'apache_mods', 'apache_rpaf' ]
+
+- name: Enable the apache rpaf module
+  apache2_module: name=rpaf state=present
+  when: apache_rpaf_install
+  notify: apache2 reload
+  tags: [ 'apache', 'apache_mods', 'apache_rpaf' ]
+
 - name: Load the apache ssl modules
   apache2_module: name={{ item }} state=present
   with_items: '{{ apache_ssl_modules }}'