🎨 enable externalTrafficPolicy: Local option to forward external IP

This commit is contained in:
2024-07-29 14:16:43 +01:00
parent 0f6eb95f20
commit 05fc32f18a
16 changed files with 324 additions and 221 deletions
+67 -67
View File
@@ -1,7 +1,7 @@
{
"version": 4,
"terraform_version": "1.9.2",
"serial": 244,
"serial": 271,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": {},
"resources": [
@@ -15,18 +15,18 @@
"index_key": "bitwarden",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "XN7ic3fzE2fjVEJ4L9Y9iZEcFDOmNNoJDpp2B8mMCZg=",
"content_base64sha512": "JVJeUaglBTTy1HIT93HAuHSvvPbJUlD9XEpCuoz7iyweavQ9lX9d7mwMcj6/BCz3KVX6HsouUBJf/boSFXxtEA==",
"content_md5": "ab572c62b93ae264e5caef9c47893901",
"content_sha1": "480650377a31be839976ea710af6b0724a0c5ecb",
"content_sha256": "5cdee27377f31367e35442782fd63d89911c1433a634da090e9a7607c98c0998",
"content_sha512": "25525e51a8250534f2d47213f771c0b874afbcf6c95250fd5c4a42ba8cfb8b2c1e6af43d957f5dee6c0c723ebf042cf72955fa1eca2e50125ffdba12157c6d10",
"content_base64sha256": "JD4ymKdXbyoqGmFDyaTYyOeFMApP8ui0CK27BEFTlv4=",
"content_base64sha512": "+W/Tt7sUJgbfsemzIllJerKMRV+8kWY2gQPiT+usc8X+BQN9yQw2XeEBQWrI4lnMi5nNeGnQwrMVBf12NNSgNA==",
"content_md5": "a45c5f5e3c0917328b796ef0c8fb341f",
"content_sha1": "465a5641ab92e18f860026171da4087e783908c2",
"content_sha256": "243e3298a7576f2a2a1a6143c9a4d8c8e785300a4ff2e8b408adbb04415396fe",
"content_sha512": "f96fd3b7bb142606dfb1e9b32259497ab28c455fbc9166368103e24febac73c5fe05037dc90c365de101416ac8e259cc8b99cd7869d0c2b31505fd7634d4a034",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bitwarden.tryton.geeraert.eu.conf",
"id": "480650377a31be839976ea710af6b0724a0c5ecb",
"id": "465a5641ab92e18f860026171da4087e783908c2",
"sensitive_content": null,
"source": null
},
@@ -43,18 +43,18 @@
"index_key": "bookstack",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "aYsH5ymxhntZVtl4vYaqyzP+zAvk0O2ccM9unYu1y1Y=",
"content_base64sha512": "LNmCmfjbHASt3xKyiwGjSoRm7u68474Sn9H63L3cSkNIa2Gfr9AMRkGPgdD4LvBVv/kqkNLqeuXDMANSf3GCPQ==",
"content_md5": "f09946f71d2688c9e2afebbf2f4f7889",
"content_sha1": "64f42753cce651b104e7f3d68d75762479a5d812",
"content_sha256": "698b07e729b1867b5956d978bd86aacb33fecc0be4d0ed9c70cf6e9d8bb5cb56",
"content_sha512": "2cd98299f8db1c04addf12b28b01a34a8466eeeebce3be129fd1fadcbddc4a43486b619fafd00c46418f81d0f82ef055bff92a90d2ea7ae5c33003527f71823d",
"content_base64sha256": "GKW+AGzci69U9US57isD9rK9jmS0p+WgGyVDSDU7tOc=",
"content_base64sha512": "54L4Rtb7T6h3qBlEz5x5mNTN6saXNd5YKRv/BDmCcL3+3vRe3GgMQORFIqWgnoT50eGnbFF7Ptw5AGMVjUIA0Q==",
"content_md5": "0b94b18b43965233baae575ac89470b4",
"content_sha1": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
"content_sha256": "18a5be006cdc8baf54f544b9ee2b03f6b2bd8e64b4a7e5a01b254348353bb4e7",
"content_sha512": "e782f846d6fb4fa877a81944cf9c7998d4cdeac69735de58291bff04398270bdfedef45edc680c40e44522a5a09e84f9d1e1a76c517b3edc390063158d4200d1",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bookstack.tryton.geeraert.eu.conf",
"id": "64f42753cce651b104e7f3d68d75762479a5d812",
"id": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
"sensitive_content": null,
"source": null
},
@@ -71,18 +71,18 @@
"index_key": "django",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "6xHIa1hXhiel6xtrmjBEPt34z0bqkv+phaDYasHdGcA=",
"content_base64sha512": "hNe4PgaKTP4bO2u8qThyNZxenxgkrOXrAJMg1TJSdAYVmPbx8ORSQaFgh3XkYxKa2D7nppXYIO0ZJnQur/zviA==",
"content_md5": "be8ebf24b43a1c75bcc45d8072205822",
"content_sha1": "50ff2f0eebc128d77f59ecb019f8d2d793e09202",
"content_sha256": "eb11c86b58578627a5eb1b6b9a30443eddf8cf46ea92ffa985a0d86ac1dd19c0",
"content_sha512": "84d7b83e068a4cfe1b3b6bbca93872359c5e9f1824ace5eb009320d5325274061598f6f1f0e45241a1608775e463129ad83ee7a695d820ed1926742eaffcef88",
"content_base64sha256": "NYUUncqBHSU1LOUvofn+DbD6oXH5dwwS6U6+iYxiNdc=",
"content_base64sha512": "nsDPZ/8ZytPFUHviWKWNJ9bleoT7xesFd6UCbmjEZlsoobHgtsFK8715/DbFWl58Z4gKI2FehjaTQRysmhTkkQ==",
"content_md5": "909df8117434248989c460305639e1bf",
"content_sha1": "c13ff042844595353c3d242223132c1bb38c52a3",
"content_sha256": "3585149dca811d25352ce52fa1f9fe0db0faa171f9770c12e94ebe898c6235d7",
"content_sha512": "9ec0cf67ff19cad3c5507be258a58d27d6e57a84fbc5eb0577a5026e68c4665b28a1b1e0b6c14af3bd79fc36c55a5e7c67880a23615e863693411cac9a14e491",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/django.tryton.geeraert.eu.conf",
"id": "50ff2f0eebc128d77f59ecb019f8d2d793e09202",
"id": "c13ff042844595353c3d242223132c1bb38c52a3",
"sensitive_content": null,
"source": null
},
@@ -99,18 +99,18 @@
"index_key": "echo",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "+EEijqWqyaGo1ZJruClDfFPchgpxwEsDJrJCHm/Yrnk=",
"content_base64sha512": "9MAzOThwpomt1ys3Ad2xrNMgMI8YQ24C5PxmGRGPDSkJPSCIX5Jrbz8IatU0PKgdI/0px1aWLNE3nst1OgxQDg==",
"content_md5": "d13df242ce19900c0d437781618ae33b",
"content_sha1": "de236efcfe8e5cb2e69b31449c6f5d81bff483b7",
"content_sha256": "f841228ea5aac9a1a8d5926bb829437c53dc860a71c04b0326b2421e6fd8ae79",
"content_sha512": "f4c033393870a689add72b3701ddb1acd320308f18436e02e4fc6619118f0d29093d20885f926b6f3f086ad5343ca81d23fd29c756962cd1379ecb753a0c500e",
"content_base64sha256": "X5x5e4cV0J7jBkUJxeEmhMopdqMGb3RwDhhWhQMmJpU=",
"content_base64sha512": "PGp5T92ygY98Nqg8poR0spuDkWWEi0LdvQ9Cr/i8WdXR/d6qtRK3xGvdmKxrGAJf0RiLkCjF4EqPmXjSClmFDg==",
"content_md5": "b52edcf0233085df596804405baf7738",
"content_sha1": "741687bc7a81efa7191b55016f721ca8af4f7026",
"content_sha256": "5f9c797b8715d09ee3064509c5e12684ca2976a3066f74700e18568503262695",
"content_sha512": "3c6a794fddb2818f7c36a83ca68474b29b839165848b42ddbd0f42aff8bc59d5d1fddeaab512b7c46bdd98ac6b18025fd1188b9028c5e04a8f9978d20a59850e",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/echo.tryton.geeraert.eu.conf",
"id": "de236efcfe8e5cb2e69b31449c6f5d81bff483b7",
"id": "741687bc7a81efa7191b55016f721ca8af4f7026",
"sensitive_content": null,
"source": null
},
@@ -127,18 +127,18 @@
"index_key": "gitlab",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "N/Vug3Oop20m9/ICeYJ6/x/chY3XjUlhWgn7t9jP2/M=",
"content_base64sha512": "RHfM7R8ZeNiyuzYTganyOn5DyYW/JoshtONNfW5SC+i+MY02bVvXIkAoXlcPDMmYYkHlJ1q+C3MsmFyibG500w==",
"content_md5": "d9fb48351128393eedfef68ba99eba30",
"content_sha1": "850e27a643e0c3f48fa2fcd27856cb6f2571fd93",
"content_sha256": "37f56e8373a8a76d26f7f20279827aff1fdc858dd78d49615a09fbb7d8cfdbf3",
"content_sha512": "4477cced1f1978d8b2bb361381a9f23a7e43c985bf268b21b4e34d7d6e520be8be318d366d5bd72240285e570f0cc9986241e5275abe0b732c985ca26c6e74d3",
"content_base64sha256": "nMQLDRENdV/P7v1cIR/aX4nGw0kBpU+0nIZ1+r8iQRg=",
"content_base64sha512": "jX4RNpjZVlQcRMXx7UCY6C5V98HXHhYVzAfs9HYXErqTuGV3ENOelfaIhS0L0hkQ9+IbwAcAuj47YnH7lvy/SQ==",
"content_md5": "e31c601485fef122d75ed3bb751b1bdc",
"content_sha1": "212a6846b84aa479989edd1bf6c37071d27845f7",
"content_sha256": "9cc40b0d110d755fcfeefd5c211fda5f89c6c34901a54fb49c8675fabf224118",
"content_sha512": "8d7e113698d956541c44c5f1ed4098e82e55f7c1d71e1615cc07ecf4761712ba93b8657710d39e95f688852d0bd21910f7e21bc00700ba3e3b6271fb96fcbf49",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/gitlab.tryton.geeraert.eu.conf",
"id": "850e27a643e0c3f48fa2fcd27856cb6f2571fd93",
"id": "212a6846b84aa479989edd1bf6c37071d27845f7",
"sensitive_content": null,
"source": null
},
@@ -155,18 +155,18 @@
"index_key": "keycloak",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "UHQ7kLIOKcsrZtyUF7945TH1hCoZROX1yY4fb1tJjdY=",
"content_base64sha512": "W7ubrC73Q0kDBDChkMkUq3eIL6bk2KP2Va7DwY4MlsdSJkB5t+Zjlq4KVqKAcNXi3xpkmE3DY1RXsVIjDA0yKg==",
"content_md5": "ee110e6ec86def55c44023774c8ea9eb",
"content_sha1": "1ba4e7057a8f8641ff1e7b2d7c3dc41d5e6f749d",
"content_sha256": "50743b90b20e29cb2b66dc9417bf78e531f5842a1944e5f5c98e1f6f5b498dd6",
"content_sha512": "5bbb9bac2ef74349030430a190c914ab77882fa6e4d8a3f655aec3c18e0c96c752264079b7e66396ae0a56a28070d5e2df1a64984dc3635457b152230c0d322a",
"content_base64sha256": "YDFo6C+Gs7zO9iejyV1lsi8sOkQv/tphpaAoRVzhloA=",
"content_base64sha512": "PL4RKM5RHoOmpR6W+y0MldSYuzcnVZulmd0HcxlVZVsQJGZ5ojLwD5JpaEERWhBVYCzUnw1VAJtoI7lsjtmtxg==",
"content_md5": "a2a34e96e2e727aba3b0d3b1406d8a6d",
"content_sha1": "3d802085939bb6502442b257438f8d6508eb7dba",
"content_sha256": "603168e82f86b3bccef627a3c95d65b22f2c3a442ffeda61a5a028455ce19680",
"content_sha512": "3cbe1128ce511e83a6a51e96fb2d0c95d498bb3727559ba599dd07731955655b10246679a232f00f92696841115a1055602cd49f0d55009b6823b96c8ed9adc6",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/keycloak.tryton.geeraert.eu.conf",
"id": "1ba4e7057a8f8641ff1e7b2d7c3dc41d5e6f749d",
"id": "3d802085939bb6502442b257438f8d6508eb7dba",
"sensitive_content": null,
"source": null
},
@@ -180,21 +180,21 @@
]
},
{
"index_key": "nextcloud",
"index_key": "router",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "4t+YENqsJPHe/4+B3zMQZntzGmd7kUmkhtkl3NyTM20=",
"content_base64sha512": "M3fSSr1sD0gGm80dpkk3lIMwUxIMBqYA65rnaTrdgpWxz06vny7KHQ0Zk+HJPb1NC8DU8WjCENAnCUcKF51tWw==",
"content_md5": "1b590a6df719896e97522071fe9d4924",
"content_sha1": "599f0c6e27f4f23f1ed88bbcf30f5280831a445b",
"content_sha256": "e2df9810daac24f1deff8f81df3310667b731a677b9149a486d925dcdc93336d",
"content_sha512": "3377d24abd6c0f48069bcd1da6493794833053120c06a600eb9ae7693add8295b1cf4eaf9f2eca1d0d1993e1c93dbd4d0bc0d4f168c210d02709470a179d6d5b",
"content_base64sha256": "njf/wYpFb5ImQRiZ3YEtlJyHfaDLYpOurAQXWGHS0yk=",
"content_base64sha512": "DGJTxAeNaxEZ5jIwQ490ajS9Jz3Pwwoc8bdkUqXxVtrvzCY3D55jHJFBxVTaM4ydaFvSr+OIYrl4xRPkJZzvqA==",
"content_md5": "b7fb63925c4c990b7f5ce9ef322bbb6f",
"content_sha1": "ca224221aeef923ffe0bc87191700796000445c5",
"content_sha256": "9e37ffc18a456f9226411899dd812d949c877da0cb6293aeac04175861d2d329",
"content_sha512": "0c6253c4078d6b1119e63230438f746a34bd273dcfc30a1cf1b76452a5f156daefcc26370f9e631c9141c554da338c9d685bd2afe38862b978c513e4259cefa8",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/nextcloud.tryton.geeraert.eu.conf",
"id": "599f0c6e27f4f23f1ed88bbcf30f5280831a445b",
"filename": "../conf.d/router.tryton.geeraert.eu.conf",
"id": "ca224221aeef923ffe0bc87191700796000445c5",
"sensitive_content": null,
"source": null
},
@@ -211,18 +211,18 @@
"index_key": "sonarr",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "wFVC3EDDEnh78WdSFy2rY66ztZiHStRR4exbuxvVzOI=",
"content_base64sha512": "HOyoR3ON0QGutDBz6AicVs/udVi1HCp0GWc/lb2L7iueOF5Afa3+3Fm4cpSB1HZYWZAu+by+0L2kCLczbQw3fA==",
"content_md5": "959dcb7c11510dd03c1a6ac8922becb3",
"content_sha1": "58691959f5b23d94a28bf6ef4ba3ee09f8619da6",
"content_sha256": "c05542dc40c312787bf16752172dab63aeb3b598874ad451e1ec5bbb1bd5cce2",
"content_sha512": "1ceca847738dd101aeb43073e8089c56cfee7558b51c2a7419673f95bd8bee2b9e385e407dadfedc59b8729481d4765859902ef9bcbed0bda408b7336d0c377c",
"content_base64sha256": "ogl7lzDmLVQKvmFcOptPeMl/DkjJ0R3HaFaZVmMFELU=",
"content_base64sha512": "IQucxWz1MBveWGz9bUJIwiI3CyCs43DbX5MYROJqcqnwZ3ahClZuwEzsgF+gVmOZ2Epki8ku7jM3f2tH6Hvs3w==",
"content_md5": "7cd01a3f613ab45bbdcf7b913ec2f852",
"content_sha1": "0546c5f745a991a885ead9fddca604cccd996fd9",
"content_sha256": "a2097b9730e62d540abe615c3a9b4f78c97f0e48c9d11dc768569956630510b5",
"content_sha512": "210b9cc56cf5301bde586cfd6d4248c222370b20ace370db5f931844e26a72a9f06776a10a566ec04cec805fa0566399d84a648bc92eee33377f6b47e87becdf",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/sonarr.tryton.geeraert.eu.conf",
"id": "58691959f5b23d94a28bf6ef4ba3ee09f8619da6",
"id": "0546c5f745a991a885ead9fddca604cccd996fd9",
"sensitive_content": null,
"source": null
},