diff --git a/Nginx.kube.yaml b/Nginx.kube.yaml
index efb9ab8..5665f46 100644
--- a/Nginx.kube.yaml
+++ b/Nginx.kube.yaml
@@ -39,6 +39,8 @@ spec:
mountPath: /var/www/certbot/
- name: proxy-cache-path-volume
mountPath: /tmp/cache/
+ - name: secret-htpasswd
+ mountPath: /authentication-htpasswd/
resources:
limits:
cpu: 250m
@@ -60,6 +62,9 @@ spec:
- name: proxy-cache-path-volume
emptyDir:
medium: Memory
+ - name: secret-htpasswd
+ secret:
+ secretName: htpasswd
---
apiVersion: v1
kind: Service
@@ -67,6 +72,7 @@ metadata:
name: reverse-proxy
namespace: reverse-proxy
spec:
+ externalTrafficPolicy: Local
ports:
- name: http
port: 80
diff --git a/conf.d/bitwarden.tryton.geeraert.eu.conf b/conf.d/bitwarden.tryton.geeraert.eu.conf
index 7a721c6..8e4c61f 100755
--- a/conf.d/bitwarden.tryton.geeraert.eu.conf
+++ b/conf.d/bitwarden.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://bitwarden_backend;
proxy_set_header Upgrade $http_upgrade;
+
}
location /.well-known/acme-challenge/ {
diff --git a/conf.d/bookstack.tryton.geeraert.eu.conf b/conf.d/bookstack.tryton.geeraert.eu.conf
index ed3b94b..ff2572e 100755
--- a/conf.d/bookstack.tryton.geeraert.eu.conf
+++ b/conf.d/bookstack.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://bookstack_backend;
proxy_set_header Upgrade $http_upgrade;
+
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
diff --git a/conf.d/django.tryton.geeraert.eu.conf b/conf.d/django.tryton.geeraert.eu.conf
index b91bbba..90fc690 100755
--- a/conf.d/django.tryton.geeraert.eu.conf
+++ b/conf.d/django.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://django_backend;
proxy_set_header Upgrade $http_upgrade;
+
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
diff --git a/conf.d/echo.tryton.geeraert.eu.conf b/conf.d/echo.tryton.geeraert.eu.conf
index 57f7d50..d4ccb49 100755
--- a/conf.d/echo.tryton.geeraert.eu.conf
+++ b/conf.d/echo.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://echo_backend;
proxy_set_header Upgrade $http_upgrade;
+
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
diff --git a/conf.d/gitlab.tryton.geeraert.eu.conf b/conf.d/gitlab.tryton.geeraert.eu.conf
index 5f67564..3924e53 100755
--- a/conf.d/gitlab.tryton.geeraert.eu.conf
+++ b/conf.d/gitlab.tryton.geeraert.eu.conf
@@ -12,13 +12,14 @@ server {
location / {
proxy_pass https://gitlab_backend;
proxy_set_header Upgrade $http_upgrade;
+
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
- proxy_pass http://gitlab_backend;
+ proxy_pass https://gitlab_backend;
}
}
diff --git a/conf.d/keycloak.tryton.geeraert.eu.conf b/conf.d/keycloak.tryton.geeraert.eu.conf
index 6c9c997..297e56c 100755
--- a/conf.d/keycloak.tryton.geeraert.eu.conf
+++ b/conf.d/keycloak.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://keycloak_backend;
proxy_set_header Upgrade $http_upgrade;
+
}
location /.well-known/acme-challenge/ {
diff --git a/conf.d/nextcloud.tryton.geeraert.eu.conf b/conf.d/nextcloud.tryton.geeraert.eu.conf
index 314104c..5af77ce 100755
--- a/conf.d/nextcloud.tryton.geeraert.eu.conf
+++ b/conf.d/nextcloud.tryton.geeraert.eu.conf
@@ -1,66 +1,95 @@
-############################################
-# config file for nextcloud
-############################################
-
upstream nextcloud_backend {
- server webserver.nextcloud.svc;
- server 1.1.1.1 backup;
+# server 192.168.88.43; #IP of old tryton server (physical server)
+# server 192.168.88.50:6456; #IP of the docker nextcloud install
+ server webserver.nextcloud.svc; #using svc dns name
+# server 192.168.88.52:31236; #IP of the kubernetes #
+# server 1.1.1.1 backup;
}
server {
- server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
+ server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
location / {
- proxy_pass http://nextcloud_backend;
- proxy_set_header Upgrade $http_upgrade;
-
- location ~* \.(html|css|jpg|gif|ico|js)$ {
- proxy_cache cache;
- proxy_cache_key $host$uri$is_args$args;
- proxy_cache_valid 200 301 302 30m;
- expires 30m;
- proxy_pass http://nextcloud_backend;
- }
-
+ proxy_pass http://nextcloud_backend/;
+ location ~* \.(html|css|jpg|gif|ico|js)$ {
+ proxy_cache cache;
+ proxy_cache_key $host$uri$is_args$args;
+ proxy_cache_valid 200 301 302 30m;
+ expires 30m;
+ proxy_pass http://nextcloud_backend;
+ }
+
+
+# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+# proxy_set_header X-Forwarded-Port $server_port;
+# proxy_set_header X-Forwarded-Scheme $scheme;
+# proxy_set_header X-Forwarded-Proto $scheme;
+# proxy_set_header X-Real-IP $remote_addr;
+# proxy_set_header Accept-Encoding "";
+# proxy_set_header Host $host;
+
+# client_body_buffer_size 512k;
+# proxy_read_timeout 86400s;
+# client_max_body_size 0;
+
+ # Websocket
+ # proxy_http_version 1.1;
+ # proxy_set_header Upgrade $http_upgrade;
+ # proxy_set_header Connection $connection_upgrade;
+
+
+
+# proxy_pass_request_headers on;
+# proxy_no_cache $cookie_nocache $arg_nocache$arg_comment;
+# proxy_no_cache $http_pragma $http_authorization;
+# proxy_cache_bypass $cookie_nocache $arg_nocache $arg_comment;
+# proxy_cache_bypass $http_pragma $http_authorization;
+# proxy_set_header HTTP_AUTHORIZATION $http_authorization;
+
}
location /.well-known/acme-challenge/ {
- root /var/www/certbot;
+ root /var/www/certbot;
}
+ location /.well-known/carddav {
+ return 301 $scheme://$host/remote.php/dav;
+ }
-
-
- location /.well-known/carddav {
- return 301 $scheme://$host/remote.php/dav;
- }
-
- location /.well-known/caldav {
- return 301 $scheme://$host/remote.php/dav;
- }
+ location /.well-known/caldav {
+ return 301 $scheme://$host/remote.php/dav;
+ }
location = /health {
- default_type text/html;
+ default_type text/html;
return 200 "health check
\n";
- }
+ }
- http2 on;
- ssl_protocols TLSv1.2;
+# listen 443 ssl; # managed by Certbot
+ listen 443 ssl;
+ listen [::]:443 ssl;
+ http2 on;
+ ssl_protocols TLSv1.2;
- listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
+ #include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+ #ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
}
server {
- if ($host = www.nextcloud.tryton.geeraert.eu) {
- return 301 https://$host$request_uri;
- }
+ if ($host = www.nextcloud.tryton.geeraert.eu) {
+ return 301 https://$host$request_uri;
+ } # managed by Certbot
- if ($host = nextcloud.tryton.geeraert.eu) {
- return 301 https://$host$request_uri;
- }
+ if ($host = nextcloud.tryton.geeraert.eu) {
+ return 301 https://$host$request_uri;
+ } # managed by Certbot
+
server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;
- listen 80;
- return 404;
+ listen 80;
+ return 404; # managed by Certbot
}
+
+
diff --git a/conf.d/router.tryton.geeraert.eu.conf b/conf.d/router.tryton.geeraert.eu.conf
old mode 100644
new mode 100755
index ac2063e..b45317c
--- a/conf.d/router.tryton.geeraert.eu.conf
+++ b/conf.d/router.tryton.geeraert.eu.conf
@@ -1,40 +1,45 @@
+############################################
+# config file for router
+############################################
+
upstream router_backend {
- server 192.168.88.1;
- server 1.1.1.1 backup;
+ server 192.168.88.1;
+ server 1.1.1.1 backup;
}
server {
- server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;
+ server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;
location / {
- proxy_pass http://router_backend;
+ proxy_pass http://router_backend;
+ proxy_set_header Upgrade $http_upgrade;
+
+ auth_basic "Administrator’s Area";
+ auth_basic_user_file /authentication-htpasswd/.htpasswd;
+
+
}
location /.well-known/acme-challenge/ {
- root /var/www/certbot;
+ root /var/www/certbot;
}
-
- listen 443 ssl; # managed by Certbot
+
+
+ listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
- #include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
- #ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
}
server {
- if ($host = www.router.tryton.geeraert.eu) {
- return 301 https://$host$request_uri;
- } # managed by Certbot
+ if ($host = www.router.tryton.geeraert.eu) {
+ return 301 https://$host$request_uri;
+ }
- if ($host = router.tryton.geeraert.eu) {
- return 301 https://$host$request_uri;
- } # managed by Certbot
-
+ if ($host = router.tryton.geeraert.eu) {
+ return 301 https://$host$request_uri;
+ }
server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;
- listen 80;
- return 404; # managed by Certbot
+ listen 80;
+ return 404;
}
-
-
diff --git a/conf.d/sonarr.tryton.geeraert.eu.conf b/conf.d/sonarr.tryton.geeraert.eu.conf
index e44cb46..0511843 100755
--- a/conf.d/sonarr.tryton.geeraert.eu.conf
+++ b/conf.d/sonarr.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://sonarr_backend;
proxy_set_header Upgrade $http_upgrade;
+
}
location /.well-known/acme-challenge/ {
diff --git a/htpasswd.secret.yaml b/htpasswd.secret.yaml
new file mode 100644
index 0000000..fc234b1
--- /dev/null
+++ b/htpasswd.secret.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+data:
+ .htpasswd: cGktdXgtY2U6JGFwcjEkMkZVbmpnUzQkaEpubzNTMnhTcURnREZsUDRmNlVwMQo=
+kind: Secret
+metadata:
+ creationTimestamp: null
+ name: htpasswd
+ namespace: reverse-proxy
diff --git a/terraform/module.tf b/terraform/module.tf
index b758cd8..9b0c8ce 100644
--- a/terraform/module.tf
+++ b/terraform/module.tf
@@ -10,7 +10,7 @@ variable "nginx_sites" {
extra_value_bool = bool
http2_bool = bool
proxy_pass_https = bool
-
+ authentication_required = bool
}))
}
@@ -26,6 +26,7 @@ resource "local_file" "nginx"{
extra-value = each.value.extra-value
http2_bool = each.value.http2_bool
proxy_pass_https = each.value.proxy_pass_https
+ authentication_required = each.value.authentication_required
})
filename = "../conf.d/${each.key}.tryton.geeraert.eu.conf"
diff --git a/terraform/nginx_config.tftpl b/terraform/nginx_config.tftpl
index a5637e6..a72ffa3 100644
--- a/terraform/nginx_config.tftpl
+++ b/terraform/nginx_config.tftpl
@@ -12,13 +12,17 @@ server {
location / {
proxy_pass %{ if proxy_pass_https}https%{else}http%{ endif }://${name_site}_backend;
proxy_set_header Upgrade $http_upgrade;
+ %{ if authentication_required}
+ auth_basic "Administrator’s Area";
+ auth_basic_user_file /authentication-htpasswd/.htpasswd;
+ %{ endif }
%{ if proxy_cache}
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
- proxy_pass http://${name_site}_backend;
+ proxy_pass %{ if proxy_pass_https}https%{else}http%{ endif }://${name_site}_backend;
}
%{ endif }
}
diff --git a/terraform/terraform.tfstate b/terraform/terraform.tfstate
index 5688430..a363f07 100644
--- a/terraform/terraform.tfstate
+++ b/terraform/terraform.tfstate
@@ -1,7 +1,7 @@
{
"version": 4,
"terraform_version": "1.9.2",
- "serial": 244,
+ "serial": 271,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": {},
"resources": [
@@ -15,18 +15,18 @@
"index_key": "bitwarden",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "XN7ic3fzE2fjVEJ4L9Y9iZEcFDOmNNoJDpp2B8mMCZg=",
- "content_base64sha512": "JVJeUaglBTTy1HIT93HAuHSvvPbJUlD9XEpCuoz7iyweavQ9lX9d7mwMcj6/BCz3KVX6HsouUBJf/boSFXxtEA==",
- "content_md5": "ab572c62b93ae264e5caef9c47893901",
- "content_sha1": "480650377a31be839976ea710af6b0724a0c5ecb",
- "content_sha256": "5cdee27377f31367e35442782fd63d89911c1433a634da090e9a7607c98c0998",
- "content_sha512": "25525e51a8250534f2d47213f771c0b874afbcf6c95250fd5c4a42ba8cfb8b2c1e6af43d957f5dee6c0c723ebf042cf72955fa1eca2e50125ffdba12157c6d10",
+ "content_base64sha256": "JD4ymKdXbyoqGmFDyaTYyOeFMApP8ui0CK27BEFTlv4=",
+ "content_base64sha512": "+W/Tt7sUJgbfsemzIllJerKMRV+8kWY2gQPiT+usc8X+BQN9yQw2XeEBQWrI4lnMi5nNeGnQwrMVBf12NNSgNA==",
+ "content_md5": "a45c5f5e3c0917328b796ef0c8fb341f",
+ "content_sha1": "465a5641ab92e18f860026171da4087e783908c2",
+ "content_sha256": "243e3298a7576f2a2a1a6143c9a4d8c8e785300a4ff2e8b408adbb04415396fe",
+ "content_sha512": "f96fd3b7bb142606dfb1e9b32259497ab28c455fbc9166368103e24febac73c5fe05037dc90c365de101416ac8e259cc8b99cd7869d0c2b31505fd7634d4a034",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bitwarden.tryton.geeraert.eu.conf",
- "id": "480650377a31be839976ea710af6b0724a0c5ecb",
+ "id": "465a5641ab92e18f860026171da4087e783908c2",
"sensitive_content": null,
"source": null
},
@@ -43,18 +43,18 @@
"index_key": "bookstack",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "aYsH5ymxhntZVtl4vYaqyzP+zAvk0O2ccM9unYu1y1Y=",
- "content_base64sha512": "LNmCmfjbHASt3xKyiwGjSoRm7u68474Sn9H63L3cSkNIa2Gfr9AMRkGPgdD4LvBVv/kqkNLqeuXDMANSf3GCPQ==",
- "content_md5": "f09946f71d2688c9e2afebbf2f4f7889",
- "content_sha1": "64f42753cce651b104e7f3d68d75762479a5d812",
- "content_sha256": "698b07e729b1867b5956d978bd86aacb33fecc0be4d0ed9c70cf6e9d8bb5cb56",
- "content_sha512": "2cd98299f8db1c04addf12b28b01a34a8466eeeebce3be129fd1fadcbddc4a43486b619fafd00c46418f81d0f82ef055bff92a90d2ea7ae5c33003527f71823d",
+ "content_base64sha256": "GKW+AGzci69U9US57isD9rK9jmS0p+WgGyVDSDU7tOc=",
+ "content_base64sha512": "54L4Rtb7T6h3qBlEz5x5mNTN6saXNd5YKRv/BDmCcL3+3vRe3GgMQORFIqWgnoT50eGnbFF7Ptw5AGMVjUIA0Q==",
+ "content_md5": "0b94b18b43965233baae575ac89470b4",
+ "content_sha1": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
+ "content_sha256": "18a5be006cdc8baf54f544b9ee2b03f6b2bd8e64b4a7e5a01b254348353bb4e7",
+ "content_sha512": "e782f846d6fb4fa877a81944cf9c7998d4cdeac69735de58291bff04398270bdfedef45edc680c40e44522a5a09e84f9d1e1a76c517b3edc390063158d4200d1",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bookstack.tryton.geeraert.eu.conf",
- "id": "64f42753cce651b104e7f3d68d75762479a5d812",
+ "id": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
"sensitive_content": null,
"source": null
},
@@ -71,18 +71,18 @@
"index_key": "django",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "6xHIa1hXhiel6xtrmjBEPt34z0bqkv+phaDYasHdGcA=",
- "content_base64sha512": "hNe4PgaKTP4bO2u8qThyNZxenxgkrOXrAJMg1TJSdAYVmPbx8ORSQaFgh3XkYxKa2D7nppXYIO0ZJnQur/zviA==",
- "content_md5": "be8ebf24b43a1c75bcc45d8072205822",
- "content_sha1": "50ff2f0eebc128d77f59ecb019f8d2d793e09202",
- "content_sha256": "eb11c86b58578627a5eb1b6b9a30443eddf8cf46ea92ffa985a0d86ac1dd19c0",
- "content_sha512": "84d7b83e068a4cfe1b3b6bbca93872359c5e9f1824ace5eb009320d5325274061598f6f1f0e45241a1608775e463129ad83ee7a695d820ed1926742eaffcef88",
+ "content_base64sha256": "NYUUncqBHSU1LOUvofn+DbD6oXH5dwwS6U6+iYxiNdc=",
+ "content_base64sha512": "nsDPZ/8ZytPFUHviWKWNJ9bleoT7xesFd6UCbmjEZlsoobHgtsFK8715/DbFWl58Z4gKI2FehjaTQRysmhTkkQ==",
+ "content_md5": "909df8117434248989c460305639e1bf",
+ "content_sha1": "c13ff042844595353c3d242223132c1bb38c52a3",
+ "content_sha256": "3585149dca811d25352ce52fa1f9fe0db0faa171f9770c12e94ebe898c6235d7",
+ "content_sha512": "9ec0cf67ff19cad3c5507be258a58d27d6e57a84fbc5eb0577a5026e68c4665b28a1b1e0b6c14af3bd79fc36c55a5e7c67880a23615e863693411cac9a14e491",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/django.tryton.geeraert.eu.conf",
- "id": "50ff2f0eebc128d77f59ecb019f8d2d793e09202",
+ "id": "c13ff042844595353c3d242223132c1bb38c52a3",
"sensitive_content": null,
"source": null
},
@@ -99,18 +99,18 @@
"index_key": "echo",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "+EEijqWqyaGo1ZJruClDfFPchgpxwEsDJrJCHm/Yrnk=",
- "content_base64sha512": "9MAzOThwpomt1ys3Ad2xrNMgMI8YQ24C5PxmGRGPDSkJPSCIX5Jrbz8IatU0PKgdI/0px1aWLNE3nst1OgxQDg==",
- "content_md5": "d13df242ce19900c0d437781618ae33b",
- "content_sha1": "de236efcfe8e5cb2e69b31449c6f5d81bff483b7",
- "content_sha256": "f841228ea5aac9a1a8d5926bb829437c53dc860a71c04b0326b2421e6fd8ae79",
- "content_sha512": "f4c033393870a689add72b3701ddb1acd320308f18436e02e4fc6619118f0d29093d20885f926b6f3f086ad5343ca81d23fd29c756962cd1379ecb753a0c500e",
+ "content_base64sha256": "X5x5e4cV0J7jBkUJxeEmhMopdqMGb3RwDhhWhQMmJpU=",
+ "content_base64sha512": "PGp5T92ygY98Nqg8poR0spuDkWWEi0LdvQ9Cr/i8WdXR/d6qtRK3xGvdmKxrGAJf0RiLkCjF4EqPmXjSClmFDg==",
+ "content_md5": "b52edcf0233085df596804405baf7738",
+ "content_sha1": "741687bc7a81efa7191b55016f721ca8af4f7026",
+ "content_sha256": "5f9c797b8715d09ee3064509c5e12684ca2976a3066f74700e18568503262695",
+ "content_sha512": "3c6a794fddb2818f7c36a83ca68474b29b839165848b42ddbd0f42aff8bc59d5d1fddeaab512b7c46bdd98ac6b18025fd1188b9028c5e04a8f9978d20a59850e",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/echo.tryton.geeraert.eu.conf",
- "id": "de236efcfe8e5cb2e69b31449c6f5d81bff483b7",
+ "id": "741687bc7a81efa7191b55016f721ca8af4f7026",
"sensitive_content": null,
"source": null
},
@@ -127,18 +127,18 @@
"index_key": "gitlab",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "N/Vug3Oop20m9/ICeYJ6/x/chY3XjUlhWgn7t9jP2/M=",
- "content_base64sha512": "RHfM7R8ZeNiyuzYTganyOn5DyYW/JoshtONNfW5SC+i+MY02bVvXIkAoXlcPDMmYYkHlJ1q+C3MsmFyibG500w==",
- "content_md5": "d9fb48351128393eedfef68ba99eba30",
- "content_sha1": "850e27a643e0c3f48fa2fcd27856cb6f2571fd93",
- "content_sha256": "37f56e8373a8a76d26f7f20279827aff1fdc858dd78d49615a09fbb7d8cfdbf3",
- "content_sha512": "4477cced1f1978d8b2bb361381a9f23a7e43c985bf268b21b4e34d7d6e520be8be318d366d5bd72240285e570f0cc9986241e5275abe0b732c985ca26c6e74d3",
+ "content_base64sha256": "nMQLDRENdV/P7v1cIR/aX4nGw0kBpU+0nIZ1+r8iQRg=",
+ "content_base64sha512": "jX4RNpjZVlQcRMXx7UCY6C5V98HXHhYVzAfs9HYXErqTuGV3ENOelfaIhS0L0hkQ9+IbwAcAuj47YnH7lvy/SQ==",
+ "content_md5": "e31c601485fef122d75ed3bb751b1bdc",
+ "content_sha1": "212a6846b84aa479989edd1bf6c37071d27845f7",
+ "content_sha256": "9cc40b0d110d755fcfeefd5c211fda5f89c6c34901a54fb49c8675fabf224118",
+ "content_sha512": "8d7e113698d956541c44c5f1ed4098e82e55f7c1d71e1615cc07ecf4761712ba93b8657710d39e95f688852d0bd21910f7e21bc00700ba3e3b6271fb96fcbf49",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/gitlab.tryton.geeraert.eu.conf",
- "id": "850e27a643e0c3f48fa2fcd27856cb6f2571fd93",
+ "id": "212a6846b84aa479989edd1bf6c37071d27845f7",
"sensitive_content": null,
"source": null
},
@@ -155,18 +155,18 @@
"index_key": "keycloak",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "UHQ7kLIOKcsrZtyUF7945TH1hCoZROX1yY4fb1tJjdY=",
- "content_base64sha512": "W7ubrC73Q0kDBDChkMkUq3eIL6bk2KP2Va7DwY4MlsdSJkB5t+Zjlq4KVqKAcNXi3xpkmE3DY1RXsVIjDA0yKg==",
- "content_md5": "ee110e6ec86def55c44023774c8ea9eb",
- "content_sha1": "1ba4e7057a8f8641ff1e7b2d7c3dc41d5e6f749d",
- "content_sha256": "50743b90b20e29cb2b66dc9417bf78e531f5842a1944e5f5c98e1f6f5b498dd6",
- "content_sha512": "5bbb9bac2ef74349030430a190c914ab77882fa6e4d8a3f655aec3c18e0c96c752264079b7e66396ae0a56a28070d5e2df1a64984dc3635457b152230c0d322a",
+ "content_base64sha256": "YDFo6C+Gs7zO9iejyV1lsi8sOkQv/tphpaAoRVzhloA=",
+ "content_base64sha512": "PL4RKM5RHoOmpR6W+y0MldSYuzcnVZulmd0HcxlVZVsQJGZ5ojLwD5JpaEERWhBVYCzUnw1VAJtoI7lsjtmtxg==",
+ "content_md5": "a2a34e96e2e727aba3b0d3b1406d8a6d",
+ "content_sha1": "3d802085939bb6502442b257438f8d6508eb7dba",
+ "content_sha256": "603168e82f86b3bccef627a3c95d65b22f2c3a442ffeda61a5a028455ce19680",
+ "content_sha512": "3cbe1128ce511e83a6a51e96fb2d0c95d498bb3727559ba599dd07731955655b10246679a232f00f92696841115a1055602cd49f0d55009b6823b96c8ed9adc6",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/keycloak.tryton.geeraert.eu.conf",
- "id": "1ba4e7057a8f8641ff1e7b2d7c3dc41d5e6f749d",
+ "id": "3d802085939bb6502442b257438f8d6508eb7dba",
"sensitive_content": null,
"source": null
},
@@ -180,21 +180,21 @@
]
},
{
- "index_key": "nextcloud",
+ "index_key": "router",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "4t+YENqsJPHe/4+B3zMQZntzGmd7kUmkhtkl3NyTM20=",
- "content_base64sha512": "M3fSSr1sD0gGm80dpkk3lIMwUxIMBqYA65rnaTrdgpWxz06vny7KHQ0Zk+HJPb1NC8DU8WjCENAnCUcKF51tWw==",
- "content_md5": "1b590a6df719896e97522071fe9d4924",
- "content_sha1": "599f0c6e27f4f23f1ed88bbcf30f5280831a445b",
- "content_sha256": "e2df9810daac24f1deff8f81df3310667b731a677b9149a486d925dcdc93336d",
- "content_sha512": "3377d24abd6c0f48069bcd1da6493794833053120c06a600eb9ae7693add8295b1cf4eaf9f2eca1d0d1993e1c93dbd4d0bc0d4f168c210d02709470a179d6d5b",
+ "content_base64sha256": "njf/wYpFb5ImQRiZ3YEtlJyHfaDLYpOurAQXWGHS0yk=",
+ "content_base64sha512": "DGJTxAeNaxEZ5jIwQ490ajS9Jz3Pwwoc8bdkUqXxVtrvzCY3D55jHJFBxVTaM4ydaFvSr+OIYrl4xRPkJZzvqA==",
+ "content_md5": "b7fb63925c4c990b7f5ce9ef322bbb6f",
+ "content_sha1": "ca224221aeef923ffe0bc87191700796000445c5",
+ "content_sha256": "9e37ffc18a456f9226411899dd812d949c877da0cb6293aeac04175861d2d329",
+ "content_sha512": "0c6253c4078d6b1119e63230438f746a34bd273dcfc30a1cf1b76452a5f156daefcc26370f9e631c9141c554da338c9d685bd2afe38862b978c513e4259cefa8",
"directory_permission": "0777",
"file_permission": "0777",
- "filename": "../conf.d/nextcloud.tryton.geeraert.eu.conf",
- "id": "599f0c6e27f4f23f1ed88bbcf30f5280831a445b",
+ "filename": "../conf.d/router.tryton.geeraert.eu.conf",
+ "id": "ca224221aeef923ffe0bc87191700796000445c5",
"sensitive_content": null,
"source": null
},
@@ -211,18 +211,18 @@
"index_key": "sonarr",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "wFVC3EDDEnh78WdSFy2rY66ztZiHStRR4exbuxvVzOI=",
- "content_base64sha512": "HOyoR3ON0QGutDBz6AicVs/udVi1HCp0GWc/lb2L7iueOF5Afa3+3Fm4cpSB1HZYWZAu+by+0L2kCLczbQw3fA==",
- "content_md5": "959dcb7c11510dd03c1a6ac8922becb3",
- "content_sha1": "58691959f5b23d94a28bf6ef4ba3ee09f8619da6",
- "content_sha256": "c05542dc40c312787bf16752172dab63aeb3b598874ad451e1ec5bbb1bd5cce2",
- "content_sha512": "1ceca847738dd101aeb43073e8089c56cfee7558b51c2a7419673f95bd8bee2b9e385e407dadfedc59b8729481d4765859902ef9bcbed0bda408b7336d0c377c",
+ "content_base64sha256": "ogl7lzDmLVQKvmFcOptPeMl/DkjJ0R3HaFaZVmMFELU=",
+ "content_base64sha512": "IQucxWz1MBveWGz9bUJIwiI3CyCs43DbX5MYROJqcqnwZ3ahClZuwEzsgF+gVmOZ2Epki8ku7jM3f2tH6Hvs3w==",
+ "content_md5": "7cd01a3f613ab45bbdcf7b913ec2f852",
+ "content_sha1": "0546c5f745a991a885ead9fddca604cccd996fd9",
+ "content_sha256": "a2097b9730e62d540abe615c3a9b4f78c97f0e48c9d11dc768569956630510b5",
+ "content_sha512": "210b9cc56cf5301bde586cfd6d4248c222370b20ace370db5f931844e26a72a9f06776a10a566ec04cec805fa0566399d84a648bc92eee33377f6b47e87becdf",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/sonarr.tryton.geeraert.eu.conf",
- "id": "58691959f5b23d94a28bf6ef4ba3ee09f8619da6",
+ "id": "0546c5f745a991a885ead9fddca604cccd996fd9",
"sensitive_content": null,
"source": null
},
diff --git a/terraform/terraform.tfstate.backup b/terraform/terraform.tfstate.backup
index d2cd072..70e3373 100644
--- a/terraform/terraform.tfstate.backup
+++ b/terraform/terraform.tfstate.backup
@@ -1,7 +1,7 @@
{
"version": 4,
"terraform_version": "1.9.2",
- "serial": 227,
+ "serial": 270,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": {},
"resources": [
@@ -15,18 +15,18 @@
"index_key": "bitwarden",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "MiHDPlxHGVzvr8FZTUvk8du6fgMi5XPAEGX5dZsiNPM=",
- "content_base64sha512": "YEfT6PCNp1W67sYhWvVqiSeT6f1CoNyMELFWSuhbEmd/TKWM7yUN6bv2btg9/9fNys+TSR2gwVPyVYkQ+lhIUw==",
- "content_md5": "81e123c4be15ae3c3dfade15cc7f0514",
- "content_sha1": "d390acbf0d02c5e29658cfb2b078fc123e09f821",
- "content_sha256": "3221c33e5c47195cefafc1594d4be4f1dbba7e0322e573c01065f9759b2234f3",
- "content_sha512": "6047d3e8f08da755baeec6215af56a892793e9fd42a0dc8c10b1564ae85b12677f4ca58cef250de9bbf66ed83dffd7cdcacf93491da0c153f2558910fa584853",
+ "content_base64sha256": "JD4ymKdXbyoqGmFDyaTYyOeFMApP8ui0CK27BEFTlv4=",
+ "content_base64sha512": "+W/Tt7sUJgbfsemzIllJerKMRV+8kWY2gQPiT+usc8X+BQN9yQw2XeEBQWrI4lnMi5nNeGnQwrMVBf12NNSgNA==",
+ "content_md5": "a45c5f5e3c0917328b796ef0c8fb341f",
+ "content_sha1": "465a5641ab92e18f860026171da4087e783908c2",
+ "content_sha256": "243e3298a7576f2a2a1a6143c9a4d8c8e785300a4ff2e8b408adbb04415396fe",
+ "content_sha512": "f96fd3b7bb142606dfb1e9b32259497ab28c455fbc9166368103e24febac73c5fe05037dc90c365de101416ac8e259cc8b99cd7869d0c2b31505fd7634d4a034",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bitwarden.tryton.geeraert.eu.conf",
- "id": "d390acbf0d02c5e29658cfb2b078fc123e09f821",
+ "id": "465a5641ab92e18f860026171da4087e783908c2",
"sensitive_content": null,
"source": null
},
@@ -43,18 +43,18 @@
"index_key": "bookstack",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "urzNcqSqLBKi0eHnlSq9xIMwmU0f4sBTXaFDbj/PmTc=",
- "content_base64sha512": "3Aw+n9/OZZNT3BTEUyRJaPFN158evN8rRJPJN1n+mJBVgGnlAhzFCB1UD+Uq/D5wmalEiDEcDyj+3K0A6nsxNw==",
- "content_md5": "1f14b6c64301c3fb014258ca423e5d44",
- "content_sha1": "45c72d585c88b10777c567f7516dc03ed5ece3f5",
- "content_sha256": "babccd72a4aa2c12a2d1e1e7952abdc48330994d1fe2c0535da1436e3fcf9937",
- "content_sha512": "dc0c3e9fdfce659353dc14c453244968f14dd79f1ebcdf2b4493c93759fe9890558069e5021cc5081d540fe52afc3e7099a94488311c0f28fedcad00ea7b3137",
+ "content_base64sha256": "GKW+AGzci69U9US57isD9rK9jmS0p+WgGyVDSDU7tOc=",
+ "content_base64sha512": "54L4Rtb7T6h3qBlEz5x5mNTN6saXNd5YKRv/BDmCcL3+3vRe3GgMQORFIqWgnoT50eGnbFF7Ptw5AGMVjUIA0Q==",
+ "content_md5": "0b94b18b43965233baae575ac89470b4",
+ "content_sha1": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
+ "content_sha256": "18a5be006cdc8baf54f544b9ee2b03f6b2bd8e64b4a7e5a01b254348353bb4e7",
+ "content_sha512": "e782f846d6fb4fa877a81944cf9c7998d4cdeac69735de58291bff04398270bdfedef45edc680c40e44522a5a09e84f9d1e1a76c517b3edc390063158d4200d1",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bookstack.tryton.geeraert.eu.conf",
- "id": "45c72d585c88b10777c567f7516dc03ed5ece3f5",
+ "id": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
"sensitive_content": null,
"source": null
},
@@ -71,18 +71,18 @@
"index_key": "django",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "G0+lIbHzq0HLNQKkoxvJaWs3byjSIOnQxcv2SbDM1wU=",
- "content_base64sha512": "RV3xxzLaD23UvfJkh4/1fCB0V696nGSiT94tCQhVQSnTnNMGYnuivQjYiLu6Pw9YbpWK5XG0WYwv0vRmhPE+7A==",
- "content_md5": "244193e3cb28880614c1ca8cab4a3e70",
- "content_sha1": "2b1b9ae48437555e29b661a44c7c2be3fb426c27",
- "content_sha256": "1b4fa521b1f3ab41cb3502a4a31bc9696b376f28d220e9d0c5cbf649b0ccd705",
- "content_sha512": "455df1c732da0f6dd4bdf264878ff57c207457af7a9c64a24fde2d0908554129d39cd306627ba2bd08d888bbba3f0f586e958ae571b4598c2fd2f46684f13eec",
+ "content_base64sha256": "NYUUncqBHSU1LOUvofn+DbD6oXH5dwwS6U6+iYxiNdc=",
+ "content_base64sha512": "nsDPZ/8ZytPFUHviWKWNJ9bleoT7xesFd6UCbmjEZlsoobHgtsFK8715/DbFWl58Z4gKI2FehjaTQRysmhTkkQ==",
+ "content_md5": "909df8117434248989c460305639e1bf",
+ "content_sha1": "c13ff042844595353c3d242223132c1bb38c52a3",
+ "content_sha256": "3585149dca811d25352ce52fa1f9fe0db0faa171f9770c12e94ebe898c6235d7",
+ "content_sha512": "9ec0cf67ff19cad3c5507be258a58d27d6e57a84fbc5eb0577a5026e68c4665b28a1b1e0b6c14af3bd79fc36c55a5e7c67880a23615e863693411cac9a14e491",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/django.tryton.geeraert.eu.conf",
- "id": "2b1b9ae48437555e29b661a44c7c2be3fb426c27",
+ "id": "c13ff042844595353c3d242223132c1bb38c52a3",
"sensitive_content": null,
"source": null
},
@@ -99,18 +99,18 @@
"index_key": "echo",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "3QkycNqzv6TJ/gLM8FHnCYOJ4kaF+2SlZB1ndpqppa4=",
- "content_base64sha512": "eky5CjdfBdtm14lZslFWyqg6NzSZ5r3Hs4OK//JlK+sST/j82bgytt+rilNi6dBe2Tw5+UsuDA6TtjNk95qfKw==",
- "content_md5": "42a45c7f53bc9ae13e903de204fa8ff0",
- "content_sha1": "2b3b100424ab1866e9597c1ea9fbc44d2b32ee67",
- "content_sha256": "dd093270dab3bfa4c9fe02ccf051e7098389e24685fb64a5641d67769aa9a5ae",
- "content_sha512": "7a4cb90a375f05db66d78959b25156caa83a373499e6bdc7b3838afff2652beb124ff8fcd9b832b6dfab8a5362e9d05ed93c39f94b2e0c0e93b63364f79a9f2b",
+ "content_base64sha256": "X5x5e4cV0J7jBkUJxeEmhMopdqMGb3RwDhhWhQMmJpU=",
+ "content_base64sha512": "PGp5T92ygY98Nqg8poR0spuDkWWEi0LdvQ9Cr/i8WdXR/d6qtRK3xGvdmKxrGAJf0RiLkCjF4EqPmXjSClmFDg==",
+ "content_md5": "b52edcf0233085df596804405baf7738",
+ "content_sha1": "741687bc7a81efa7191b55016f721ca8af4f7026",
+ "content_sha256": "5f9c797b8715d09ee3064509c5e12684ca2976a3066f74700e18568503262695",
+ "content_sha512": "3c6a794fddb2818f7c36a83ca68474b29b839165848b42ddbd0f42aff8bc59d5d1fddeaab512b7c46bdd98ac6b18025fd1188b9028c5e04a8f9978d20a59850e",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/echo.tryton.geeraert.eu.conf",
- "id": "2b3b100424ab1866e9597c1ea9fbc44d2b32ee67",
+ "id": "741687bc7a81efa7191b55016f721ca8af4f7026",
"sensitive_content": null,
"source": null
},
@@ -127,18 +127,18 @@
"index_key": "gitlab",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "Yg5Q1OgAoCGr9jtol6cNdhP7x12nzBosJ6u7hp+kw9A=",
- "content_base64sha512": "eZcu+kGxo8KsH1XcSS1rdLEiyxnJL4tzA+8cvipUzjOT2Jen2ugtBE+nqWUtwxBcP176znvpVFGoy4kBnoPSzw==",
- "content_md5": "fa125ab7b89e4f43663be6561acf24ec",
- "content_sha1": "ee9cd14ea17ca1316250ec16eede425158abb453",
- "content_sha256": "620e50d4e800a021abf63b6897a70d7613fbc75da7cc1a2c27abbb869fa4c3d0",
- "content_sha512": "79972efa41b1a3c2ac1f55dc492d6b74b122cb19c92f8b7303ef1cbe2a54ce3393d897a7dae82d044fa7a9652dc3105c3f5eface7be95451a8cb89019e83d2cf",
+ "content_base64sha256": "nMQLDRENdV/P7v1cIR/aX4nGw0kBpU+0nIZ1+r8iQRg=",
+ "content_base64sha512": "jX4RNpjZVlQcRMXx7UCY6C5V98HXHhYVzAfs9HYXErqTuGV3ENOelfaIhS0L0hkQ9+IbwAcAuj47YnH7lvy/SQ==",
+ "content_md5": "e31c601485fef122d75ed3bb751b1bdc",
+ "content_sha1": "212a6846b84aa479989edd1bf6c37071d27845f7",
+ "content_sha256": "9cc40b0d110d755fcfeefd5c211fda5f89c6c34901a54fb49c8675fabf224118",
+ "content_sha512": "8d7e113698d956541c44c5f1ed4098e82e55f7c1d71e1615cc07ecf4761712ba93b8657710d39e95f688852d0bd21910f7e21bc00700ba3e3b6271fb96fcbf49",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/gitlab.tryton.geeraert.eu.conf",
- "id": "ee9cd14ea17ca1316250ec16eede425158abb453",
+ "id": "212a6846b84aa479989edd1bf6c37071d27845f7",
"sensitive_content": null,
"source": null
},
@@ -155,18 +155,18 @@
"index_key": "keycloak",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "C9ncNPhDpmhIg3cqfCGbRGQrLA8GiOzkn/28lVhNruk=",
- "content_base64sha512": "QpJ6nxvIBfooa8km+URzuNcZMgq5/7pKxd3dnlRlOs7scNuHzRAJaV9Jfl9XDTmDGWR2l9N8qecc0G2HbWnJXA==",
- "content_md5": "5f2d3f68bf54b78ca6ca7064ff7cd36a",
- "content_sha1": "aa739ee51ae97e619b16659de7621da9d47a18e5",
- "content_sha256": "0bd9dc34f843a6684883772a7c219b44642b2c0f0688ece49ffdbc95584daee9",
- "content_sha512": "42927a9f1bc805fa286bc926f94473b8d719320ab9ffba4ac5dddd9e54653aceec70db87cd1009695f497e5f570d398319647697d37ca9e71cd06d876d69c95c",
+ "content_base64sha256": "YDFo6C+Gs7zO9iejyV1lsi8sOkQv/tphpaAoRVzhloA=",
+ "content_base64sha512": "PL4RKM5RHoOmpR6W+y0MldSYuzcnVZulmd0HcxlVZVsQJGZ5ojLwD5JpaEERWhBVYCzUnw1VAJtoI7lsjtmtxg==",
+ "content_md5": "a2a34e96e2e727aba3b0d3b1406d8a6d",
+ "content_sha1": "3d802085939bb6502442b257438f8d6508eb7dba",
+ "content_sha256": "603168e82f86b3bccef627a3c95d65b22f2c3a442ffeda61a5a028455ce19680",
+ "content_sha512": "3cbe1128ce511e83a6a51e96fb2d0c95d498bb3727559ba599dd07731955655b10246679a232f00f92696841115a1055602cd49f0d55009b6823b96c8ed9adc6",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/keycloak.tryton.geeraert.eu.conf",
- "id": "aa739ee51ae97e619b16659de7621da9d47a18e5",
+ "id": "3d802085939bb6502442b257438f8d6508eb7dba",
"sensitive_content": null,
"source": null
},
@@ -183,18 +183,46 @@
"index_key": "nextcloud",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "Wuh7w2VWja7APrAI+S7GO/IXNoUzZ4e9wzFbAZ5Ppts=",
- "content_base64sha512": "8P6Im51F8nDVM/ia7TlznoRL85rf2VsXCgT+gUjNGlFPq77x7lVQnNLa0dGRzNBRTxiyHm/iH7LEeJHpFxWfcQ==",
- "content_md5": "e3770a49a60296c2a67bfd5de70fa1b6",
- "content_sha1": "d0224436372caefd1d60881cf282cda3e2c0a9c2",
- "content_sha256": "5ae87bc365568daec03eb008f92ec63bf2173685336787bdc3315b019e4fa6db",
- "content_sha512": "f0fe889b9d45f270d533f89aed39739e844bf39adfd95b170a04fe8148cd1a514fabbef1ee55509cd2dad1d191ccd0514f18b21e6fe21fb2c47891e917159f71",
+ "content_base64sha256": "gbQo8yOBGcppHaTeMsz5im06QF/qpCT3Bp71cH5Bjxs=",
+ "content_base64sha512": "+01kkixXQa8TWOgxh1aZ9n02z9A6QFukzkWZbLAgGFAht8o+GdLLFkofFlMnKF3Mza38ej4hp2k8q+HSpAw2+Q==",
+ "content_md5": "81b7335261de0349a460744fe4598d96",
+ "content_sha1": "6c4e70985067644ed9707a8b02f39b5ff2236f41",
+ "content_sha256": "81b428f3238119ca691da4de32ccf98a6d3a405feaa424f7069ef5707e418f1b",
+ "content_sha512": "fb4d64922c5741af1358e831875699f67d36cfd03a405ba4ce45996cb020185021b7ca3e19d2cb164a1f165327285dcccdadfc7a3e21a7693cabe1d2a40c36f9",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/nextcloud.tryton.geeraert.eu.conf",
- "id": "d0224436372caefd1d60881cf282cda3e2c0a9c2",
+ "id": "6c4e70985067644ed9707a8b02f39b5ff2236f41",
+ "sensitive_content": null,
+ "source": null
+ },
+ "sensitive_attributes": [
+ [
+ {
+ "type": "get_attr",
+ "value": "sensitive_content"
+ }
+ ]
+ ]
+ },
+ {
+ "index_key": "router",
+ "schema_version": 0,
+ "attributes": {
+ "content": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content_base64": null,
+ "content_base64sha256": "njf/wYpFb5ImQRiZ3YEtlJyHfaDLYpOurAQXWGHS0yk=",
+ "content_base64sha512": "DGJTxAeNaxEZ5jIwQ490ajS9Jz3Pwwoc8bdkUqXxVtrvzCY3D55jHJFBxVTaM4ydaFvSr+OIYrl4xRPkJZzvqA==",
+ "content_md5": "b7fb63925c4c990b7f5ce9ef322bbb6f",
+ "content_sha1": "ca224221aeef923ffe0bc87191700796000445c5",
+ "content_sha256": "9e37ffc18a456f9226411899dd812d949c877da0cb6293aeac04175861d2d329",
+ "content_sha512": "0c6253c4078d6b1119e63230438f746a34bd273dcfc30a1cf1b76452a5f156daefcc26370f9e631c9141c554da338c9d685bd2afe38862b978c513e4259cefa8",
+ "directory_permission": "0777",
+ "file_permission": "0777",
+ "filename": "../conf.d/router.tryton.geeraert.eu.conf",
+ "id": "ca224221aeef923ffe0bc87191700796000445c5",
"sensitive_content": null,
"source": null
},
@@ -211,18 +239,18 @@
"index_key": "sonarr",
"schema_version": 0,
"attributes": {
- "content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
+ "content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
- "content_base64sha256": "mp3AObi9eXjcUlCXGqwSTLBuyzIgESMoPatl7YzY0uM=",
- "content_base64sha512": "pcKbU6H2METIsmx2WMr0GjHF35s6zX6BtMaYLNwFYL2x+JjWIoWuJh/XJEozSnN+EdQnYuLG9VisYnZRtyJwdw==",
- "content_md5": "b050dc3f5273d7d59a89d1aef51b9f6c",
- "content_sha1": "02cdb271fc2a79c9a8d4363fe1fed714fb55fb1a",
- "content_sha256": "9a9dc039b8bd7978dc5250971aac124cb06ecb32201123283dab65ed8cd8d2e3",
- "content_sha512": "a5c29b53a1f63044c8b26c7658caf41a31c5df9b3acd7e81b4c6982cdc0560bdb1f898d62285ae261fd7244a334a737e11d42762e2c6f558ac627651b7227077",
+ "content_base64sha256": "ogl7lzDmLVQKvmFcOptPeMl/DkjJ0R3HaFaZVmMFELU=",
+ "content_base64sha512": "IQucxWz1MBveWGz9bUJIwiI3CyCs43DbX5MYROJqcqnwZ3ahClZuwEzsgF+gVmOZ2Epki8ku7jM3f2tH6Hvs3w==",
+ "content_md5": "7cd01a3f613ab45bbdcf7b913ec2f852",
+ "content_sha1": "0546c5f745a991a885ead9fddca604cccd996fd9",
+ "content_sha256": "a2097b9730e62d540abe615c3a9b4f78c97f0e48c9d11dc768569956630510b5",
+ "content_sha512": "210b9cc56cf5301bde586cfd6d4248c222370b20ace370db5f931844e26a72a9f06776a10a566ec04cec805fa0566399d84a648bc92eee33377f6b47e87becdf",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/sonarr.tryton.geeraert.eu.conf",
- "id": "02cdb271fc2a79c9a8d4363fe1fed714fb55fb1a",
+ "id": "0546c5f745a991a885ead9fddca604cccd996fd9",
"sensitive_content": null,
"source": null
},
diff --git a/terraform/variables.auto.tfvars b/terraform/variables.auto.tfvars
index f78e5d8..8fa805f 100644
--- a/terraform/variables.auto.tfvars
+++ b/terraform/variables.auto.tfvars
@@ -6,6 +6,7 @@ nginx_sites = {
extra-value = false
http2_bool = true
proxy_pass_https = false
+ authentication_required = false
}
bookstack = {
@@ -15,7 +16,7 @@ nginx_sites = {
extra-value = false
http2_bool = false
proxy_pass_https = false
-
+ authentication_required = false
}
django = {
service = "webserver.django-python.svc:8000"
@@ -24,7 +25,8 @@ nginx_sites = {
extra-value = false
http2_bool = true
proxy_pass_https = false
- }
+ authentication_required = false
+ }
echo = {
service = "echo-server.echo-server.svc:80"
proxy_cache = true
@@ -32,6 +34,7 @@ nginx_sites = {
extra-value = false
http2_bool = true
proxy_pass_https = false
+ authentication_required = false
}
gitlab = {
service = "webserver.gitlab.svc:443"
@@ -43,6 +46,7 @@ client_max_body_size 20m;
EOT
http2_bool = true
proxy_pass_https = true
+ authentication_required = false
}
sonarr = {
service = "sonarr.servarr.svc"
@@ -52,7 +56,7 @@ client_max_body_size 20m;
extra-value = <health check
\n";
+# }
+# EOT
+# proxy_pass_https = false
+# authentication_required = false
+# }
-
- location /.well-known/carddav {
- return 301 $scheme://$host/remote.php/dav;
- }
-
- location /.well-known/caldav {
- return 301 $scheme://$host/remote.php/dav;
- }
-
- location = /health {
- default_type text/html;
- return 200 "health check
\n";
- }
- EOT
+ router = {
+ service = "192.168.88.1"
+ proxy_cache = false
+ extra_value_bool = false
+ extra-value = false
+ http2_bool = false
proxy_pass_https = false
+ authentication_required = true
}
}