From 03d2743507e609164a6096dbf0755cb932b35e36 Mon Sep 17 00:00:00 2001
From: pierre <pierre@geeraert.eu>
Date: Wed, 22 Jul 2026 23:33:00 +0100
Subject: [PATCH] removing fail2ban policy as well

---
 terraform/module.tf             |  2 +-
 terraform/variables.auto.tfvars | 76 +++++++++++++++++++++------------
 2 files changed, 49 insertions(+), 29 deletions(-)

diff --git a/terraform/module.tf b/terraform/module.tf
index 7935a09..f5bac6e 100644
--- a/terraform/module.tf
+++ b/terraform/module.tf
@@ -14,7 +14,7 @@ variable "nginx_sites" {
     authentication_required = optional(bool, false)
     redirect_to_https_bool  = optional(bool, true)
     listen_port_80_bool     = optional(bool, false)
-    geoip_blocking          = optional(bool, true)
+    geoip_blocking          = optional(bool, false)
     geoip_allow             = optional(list(string), ["FR", "GB"])
   }))
 
diff --git a/terraform/variables.auto.tfvars b/terraform/variables.auto.tfvars
index 92efb54..05ceadd 100644
--- a/terraform/variables.auto.tfvars
+++ b/terraform/variables.auto.tfvars
@@ -47,6 +47,17 @@ nginx_sites = {
     http2_bool  = true
   }
 
+  redirect-testing = {
+    service     = "django-testing-svc.django-testing.svc:8000"
+    proxy_cache = true
+    http2_bool  = true
+  }
+
+  job-testing = {
+    service     = "django-testing-svc.django-testing.svc:8000"
+    proxy_cache = true
+    http2_bool  = true
+  }
   echo = {
     enabled = false
     #    service     = "echo-server.echo-server.svc:80"
@@ -102,7 +113,9 @@ client_max_body_size 20m;
     proxy_pass_https = true
   }
   sonarr = {
-    service = "sonarr-svc.servarr.svc:8989"
+    service     = "sonarr-svc.servarr.svc:8989"
+    geoip_allow = ["FR", "GB", "NL"]
+
   }
 
   keycloak = {
@@ -173,17 +186,23 @@ client_max_body_size 20m;
     service = "portainer.portainer.svc"
   }
   prowlarr = {
-    service = "prowlarr-svc.servarr.svc:9696"
+    service     = "prowlarr-svc.servarr.svc:9696"
+    geoip_allow = ["FR", "GB", "NL"]
+
   }
   proxmox = {
     service = "192.168.6.2:8006"
     enabled = false
   }
   qbittorrent = {
-    service = "qbittorrent-svc.servarr.svc:8080"
+    service     = "qbittorrent-svc.servarr.svc:8080"
+    geoip_allow = ["FR", "GB", "NL"]
+
   }
   radarr = {
-    service = "radarr-svc.servarr.svc:7878"
+    service     = "radarr-svc.servarr.svc:7878"
+    geoip_allow = ["FR", "GB", "NL"]
+
   }
   recommendarr = {
     service = "recommendarr-svc.servarr.svc:3000"
@@ -218,6 +237,7 @@ client_max_body_size 20m;
   immich = {
     #service = "immich-server.immich.svc:2283"
     service              = "immich-svc.immich.svc:2283"
+    geoip_allow          = ["FR", "GB", "NL"]
     extra-value-location = <<EOT
        proxy_set_header Connection "upgrade";
        proxy_set_header X-Real-IP $remote_addr;
@@ -246,9 +266,14 @@ client_max_body_size 20m;
     enabled                = false
     redirect_to_https_bool = false
     listen_port_80_bool    = true
-    service                = "screeps-svc.screeps.svc:21025"
+    service                = "screeps-svc.screeps.svc:25565"
+  }
+  minecraft = {
+    enabled                = false
+    redirect_to_https_bool = false
+    listen_port_80_bool    = true
+    service                = "minecraft-svc.minecraft.svc:21025"
   }
-
   stirling = {
     enabled              = false
     service              = "stirling-svc.stirling.svc:8080"
@@ -345,7 +370,7 @@ proxy_set_header Connection "upgrade";
   }
   stash = {
     #  enabled              = false
-    service        = "stash-svc.stash.svc:9999"
+    service = "stash-svc.stash.svc:9999"
     #geoip_blocking = false
     #extra-value= <<EOT
     #   proxy_protocol on;
@@ -391,23 +416,6 @@ proxy_set_header Connection "upgrade";
     enabled = false
     service = "jobspy-svc.jobspy.svc:8000"
   }
-  tprowlarr = {
-    enabled = false
-    service = "prowlarr-svc.tservarr.svc:9696"
-  }
-  tradarr = {
-    enabled = false
-    service = "radarr-svc.tservarr.svc:7878"
-  }
-  tsonarr = {
-    enabled = false
-    service = "sonarr-svc.tservarr.svc:8989"
-  }
-  tqbitorrent = {
-    enabled = false
-    service = "qbitorrent-svc.tservarr.svc:8080"
-  }
-
   poste = {
     enabled              = false
     service              = "poste-svc.poste.svc:443"
@@ -430,8 +438,9 @@ proxy_set_header Connection "upgrade";
   }
   wikijs = {
     #enabled     = false
-    service     = "wikijs-svc.wikijs.svc:3000"
-    extra-value = <<EOT
+    geoip_blocking = false
+    service        = "wikijs-svc.wikijs.svc:3000"
+    extra-value    = <<EOT
 client_max_body_size 20m;
         proxy_request_buffering off;
                 EOT
@@ -486,8 +495,19 @@ proxy_set_header Connection "upgrade";
                 EOT
 
   }
-  overleaf = {
-    service = "overleaf-svc.overleaf.svc:80"
+  opencloud = {
+    enabled          = false
+    service          = "opencloud-svc.opencloud.svc:9200"
+    proxy_pass_https = true
+
   }
+  owncloud = {
+    enabled = false
+    service = "owncloud-svc.owncloud.svc:8080"
+  }
+
+  #overleaf = {
+  #  service = "overleaf-svc.overleaf.svc:80"
+  #}
 }
 deny_ip = ["1.2.3.4"]