🎨 enable externalTrafficPolicy: Local option to forward external IP

This commit is contained in:
2024-07-29 14:16:43 +01:00
parent 0f6eb95f20
commit 05fc32f18a
16 changed files with 324 additions and 221 deletions
+93 -65
View File
@@ -1,7 +1,7 @@
{
"version": 4,
"terraform_version": "1.9.2",
"serial": 227,
"serial": 270,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": {},
"resources": [
@@ -15,18 +15,18 @@
"index_key": "bitwarden",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "MiHDPlxHGVzvr8FZTUvk8du6fgMi5XPAEGX5dZsiNPM=",
"content_base64sha512": "YEfT6PCNp1W67sYhWvVqiSeT6f1CoNyMELFWSuhbEmd/TKWM7yUN6bv2btg9/9fNys+TSR2gwVPyVYkQ+lhIUw==",
"content_md5": "81e123c4be15ae3c3dfade15cc7f0514",
"content_sha1": "d390acbf0d02c5e29658cfb2b078fc123e09f821",
"content_sha256": "3221c33e5c47195cefafc1594d4be4f1dbba7e0322e573c01065f9759b2234f3",
"content_sha512": "6047d3e8f08da755baeec6215af56a892793e9fd42a0dc8c10b1564ae85b12677f4ca58cef250de9bbf66ed83dffd7cdcacf93491da0c153f2558910fa584853",
"content_base64sha256": "JD4ymKdXbyoqGmFDyaTYyOeFMApP8ui0CK27BEFTlv4=",
"content_base64sha512": "+W/Tt7sUJgbfsemzIllJerKMRV+8kWY2gQPiT+usc8X+BQN9yQw2XeEBQWrI4lnMi5nNeGnQwrMVBf12NNSgNA==",
"content_md5": "a45c5f5e3c0917328b796ef0c8fb341f",
"content_sha1": "465a5641ab92e18f860026171da4087e783908c2",
"content_sha256": "243e3298a7576f2a2a1a6143c9a4d8c8e785300a4ff2e8b408adbb04415396fe",
"content_sha512": "f96fd3b7bb142606dfb1e9b32259497ab28c455fbc9166368103e24febac73c5fe05037dc90c365de101416ac8e259cc8b99cd7869d0c2b31505fd7634d4a034",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bitwarden.tryton.geeraert.eu.conf",
"id": "d390acbf0d02c5e29658cfb2b078fc123e09f821",
"id": "465a5641ab92e18f860026171da4087e783908c2",
"sensitive_content": null,
"source": null
},
@@ -43,18 +43,18 @@
"index_key": "bookstack",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "urzNcqSqLBKi0eHnlSq9xIMwmU0f4sBTXaFDbj/PmTc=",
"content_base64sha512": "3Aw+n9/OZZNT3BTEUyRJaPFN158evN8rRJPJN1n+mJBVgGnlAhzFCB1UD+Uq/D5wmalEiDEcDyj+3K0A6nsxNw==",
"content_md5": "1f14b6c64301c3fb014258ca423e5d44",
"content_sha1": "45c72d585c88b10777c567f7516dc03ed5ece3f5",
"content_sha256": "babccd72a4aa2c12a2d1e1e7952abdc48330994d1fe2c0535da1436e3fcf9937",
"content_sha512": "dc0c3e9fdfce659353dc14c453244968f14dd79f1ebcdf2b4493c93759fe9890558069e5021cc5081d540fe52afc3e7099a94488311c0f28fedcad00ea7b3137",
"content_base64sha256": "GKW+AGzci69U9US57isD9rK9jmS0p+WgGyVDSDU7tOc=",
"content_base64sha512": "54L4Rtb7T6h3qBlEz5x5mNTN6saXNd5YKRv/BDmCcL3+3vRe3GgMQORFIqWgnoT50eGnbFF7Ptw5AGMVjUIA0Q==",
"content_md5": "0b94b18b43965233baae575ac89470b4",
"content_sha1": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
"content_sha256": "18a5be006cdc8baf54f544b9ee2b03f6b2bd8e64b4a7e5a01b254348353bb4e7",
"content_sha512": "e782f846d6fb4fa877a81944cf9c7998d4cdeac69735de58291bff04398270bdfedef45edc680c40e44522a5a09e84f9d1e1a76c517b3edc390063158d4200d1",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bookstack.tryton.geeraert.eu.conf",
"id": "45c72d585c88b10777c567f7516dc03ed5ece3f5",
"id": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
"sensitive_content": null,
"source": null
},
@@ -71,18 +71,18 @@
"index_key": "django",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "G0+lIbHzq0HLNQKkoxvJaWs3byjSIOnQxcv2SbDM1wU=",
"content_base64sha512": "RV3xxzLaD23UvfJkh4/1fCB0V696nGSiT94tCQhVQSnTnNMGYnuivQjYiLu6Pw9YbpWK5XG0WYwv0vRmhPE+7A==",
"content_md5": "244193e3cb28880614c1ca8cab4a3e70",
"content_sha1": "2b1b9ae48437555e29b661a44c7c2be3fb426c27",
"content_sha256": "1b4fa521b1f3ab41cb3502a4a31bc9696b376f28d220e9d0c5cbf649b0ccd705",
"content_sha512": "455df1c732da0f6dd4bdf264878ff57c207457af7a9c64a24fde2d0908554129d39cd306627ba2bd08d888bbba3f0f586e958ae571b4598c2fd2f46684f13eec",
"content_base64sha256": "NYUUncqBHSU1LOUvofn+DbD6oXH5dwwS6U6+iYxiNdc=",
"content_base64sha512": "nsDPZ/8ZytPFUHviWKWNJ9bleoT7xesFd6UCbmjEZlsoobHgtsFK8715/DbFWl58Z4gKI2FehjaTQRysmhTkkQ==",
"content_md5": "909df8117434248989c460305639e1bf",
"content_sha1": "c13ff042844595353c3d242223132c1bb38c52a3",
"content_sha256": "3585149dca811d25352ce52fa1f9fe0db0faa171f9770c12e94ebe898c6235d7",
"content_sha512": "9ec0cf67ff19cad3c5507be258a58d27d6e57a84fbc5eb0577a5026e68c4665b28a1b1e0b6c14af3bd79fc36c55a5e7c67880a23615e863693411cac9a14e491",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/django.tryton.geeraert.eu.conf",
"id": "2b1b9ae48437555e29b661a44c7c2be3fb426c27",
"id": "c13ff042844595353c3d242223132c1bb38c52a3",
"sensitive_content": null,
"source": null
},
@@ -99,18 +99,18 @@
"index_key": "echo",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "3QkycNqzv6TJ/gLM8FHnCYOJ4kaF+2SlZB1ndpqppa4=",
"content_base64sha512": "eky5CjdfBdtm14lZslFWyqg6NzSZ5r3Hs4OK//JlK+sST/j82bgytt+rilNi6dBe2Tw5+UsuDA6TtjNk95qfKw==",
"content_md5": "42a45c7f53bc9ae13e903de204fa8ff0",
"content_sha1": "2b3b100424ab1866e9597c1ea9fbc44d2b32ee67",
"content_sha256": "dd093270dab3bfa4c9fe02ccf051e7098389e24685fb64a5641d67769aa9a5ae",
"content_sha512": "7a4cb90a375f05db66d78959b25156caa83a373499e6bdc7b3838afff2652beb124ff8fcd9b832b6dfab8a5362e9d05ed93c39f94b2e0c0e93b63364f79a9f2b",
"content_base64sha256": "X5x5e4cV0J7jBkUJxeEmhMopdqMGb3RwDhhWhQMmJpU=",
"content_base64sha512": "PGp5T92ygY98Nqg8poR0spuDkWWEi0LdvQ9Cr/i8WdXR/d6qtRK3xGvdmKxrGAJf0RiLkCjF4EqPmXjSClmFDg==",
"content_md5": "b52edcf0233085df596804405baf7738",
"content_sha1": "741687bc7a81efa7191b55016f721ca8af4f7026",
"content_sha256": "5f9c797b8715d09ee3064509c5e12684ca2976a3066f74700e18568503262695",
"content_sha512": "3c6a794fddb2818f7c36a83ca68474b29b839165848b42ddbd0f42aff8bc59d5d1fddeaab512b7c46bdd98ac6b18025fd1188b9028c5e04a8f9978d20a59850e",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/echo.tryton.geeraert.eu.conf",
"id": "2b3b100424ab1866e9597c1ea9fbc44d2b32ee67",
"id": "741687bc7a81efa7191b55016f721ca8af4f7026",
"sensitive_content": null,
"source": null
},
@@ -127,18 +127,18 @@
"index_key": "gitlab",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "Yg5Q1OgAoCGr9jtol6cNdhP7x12nzBosJ6u7hp+kw9A=",
"content_base64sha512": "eZcu+kGxo8KsH1XcSS1rdLEiyxnJL4tzA+8cvipUzjOT2Jen2ugtBE+nqWUtwxBcP176znvpVFGoy4kBnoPSzw==",
"content_md5": "fa125ab7b89e4f43663be6561acf24ec",
"content_sha1": "ee9cd14ea17ca1316250ec16eede425158abb453",
"content_sha256": "620e50d4e800a021abf63b6897a70d7613fbc75da7cc1a2c27abbb869fa4c3d0",
"content_sha512": "79972efa41b1a3c2ac1f55dc492d6b74b122cb19c92f8b7303ef1cbe2a54ce3393d897a7dae82d044fa7a9652dc3105c3f5eface7be95451a8cb89019e83d2cf",
"content_base64sha256": "nMQLDRENdV/P7v1cIR/aX4nGw0kBpU+0nIZ1+r8iQRg=",
"content_base64sha512": "jX4RNpjZVlQcRMXx7UCY6C5V98HXHhYVzAfs9HYXErqTuGV3ENOelfaIhS0L0hkQ9+IbwAcAuj47YnH7lvy/SQ==",
"content_md5": "e31c601485fef122d75ed3bb751b1bdc",
"content_sha1": "212a6846b84aa479989edd1bf6c37071d27845f7",
"content_sha256": "9cc40b0d110d755fcfeefd5c211fda5f89c6c34901a54fb49c8675fabf224118",
"content_sha512": "8d7e113698d956541c44c5f1ed4098e82e55f7c1d71e1615cc07ecf4761712ba93b8657710d39e95f688852d0bd21910f7e21bc00700ba3e3b6271fb96fcbf49",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/gitlab.tryton.geeraert.eu.conf",
"id": "ee9cd14ea17ca1316250ec16eede425158abb453",
"id": "212a6846b84aa479989edd1bf6c37071d27845f7",
"sensitive_content": null,
"source": null
},
@@ -155,18 +155,18 @@
"index_key": "keycloak",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "C9ncNPhDpmhIg3cqfCGbRGQrLA8GiOzkn/28lVhNruk=",
"content_base64sha512": "QpJ6nxvIBfooa8km+URzuNcZMgq5/7pKxd3dnlRlOs7scNuHzRAJaV9Jfl9XDTmDGWR2l9N8qecc0G2HbWnJXA==",
"content_md5": "5f2d3f68bf54b78ca6ca7064ff7cd36a",
"content_sha1": "aa739ee51ae97e619b16659de7621da9d47a18e5",
"content_sha256": "0bd9dc34f843a6684883772a7c219b44642b2c0f0688ece49ffdbc95584daee9",
"content_sha512": "42927a9f1bc805fa286bc926f94473b8d719320ab9ffba4ac5dddd9e54653aceec70db87cd1009695f497e5f570d398319647697d37ca9e71cd06d876d69c95c",
"content_base64sha256": "YDFo6C+Gs7zO9iejyV1lsi8sOkQv/tphpaAoRVzhloA=",
"content_base64sha512": "PL4RKM5RHoOmpR6W+y0MldSYuzcnVZulmd0HcxlVZVsQJGZ5ojLwD5JpaEERWhBVYCzUnw1VAJtoI7lsjtmtxg==",
"content_md5": "a2a34e96e2e727aba3b0d3b1406d8a6d",
"content_sha1": "3d802085939bb6502442b257438f8d6508eb7dba",
"content_sha256": "603168e82f86b3bccef627a3c95d65b22f2c3a442ffeda61a5a028455ce19680",
"content_sha512": "3cbe1128ce511e83a6a51e96fb2d0c95d498bb3727559ba599dd07731955655b10246679a232f00f92696841115a1055602cd49f0d55009b6823b96c8ed9adc6",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/keycloak.tryton.geeraert.eu.conf",
"id": "aa739ee51ae97e619b16659de7621da9d47a18e5",
"id": "3d802085939bb6502442b257438f8d6508eb7dba",
"sensitive_content": null,
"source": null
},
@@ -183,18 +183,46 @@
"index_key": "nextcloud",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "Wuh7w2VWja7APrAI+S7GO/IXNoUzZ4e9wzFbAZ5Ppts=",
"content_base64sha512": "8P6Im51F8nDVM/ia7TlznoRL85rf2VsXCgT+gUjNGlFPq77x7lVQnNLa0dGRzNBRTxiyHm/iH7LEeJHpFxWfcQ==",
"content_md5": "e3770a49a60296c2a67bfd5de70fa1b6",
"content_sha1": "d0224436372caefd1d60881cf282cda3e2c0a9c2",
"content_sha256": "5ae87bc365568daec03eb008f92ec63bf2173685336787bdc3315b019e4fa6db",
"content_sha512": "f0fe889b9d45f270d533f89aed39739e844bf39adfd95b170a04fe8148cd1a514fabbef1ee55509cd2dad1d191ccd0514f18b21e6fe21fb2c47891e917159f71",
"content_base64sha256": "gbQo8yOBGcppHaTeMsz5im06QF/qpCT3Bp71cH5Bjxs=",
"content_base64sha512": "+01kkixXQa8TWOgxh1aZ9n02z9A6QFukzkWZbLAgGFAht8o+GdLLFkofFlMnKF3Mza38ej4hp2k8q+HSpAw2+Q==",
"content_md5": "81b7335261de0349a460744fe4598d96",
"content_sha1": "6c4e70985067644ed9707a8b02f39b5ff2236f41",
"content_sha256": "81b428f3238119ca691da4de32ccf98a6d3a405feaa424f7069ef5707e418f1b",
"content_sha512": "fb4d64922c5741af1358e831875699f67d36cfd03a405ba4ce45996cb020185021b7ca3e19d2cb164a1f165327285dcccdadfc7a3e21a7693cabe1d2a40c36f9",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/nextcloud.tryton.geeraert.eu.conf",
"id": "d0224436372caefd1d60881cf282cda3e2c0a9c2",
"id": "6c4e70985067644ed9707a8b02f39b5ff2236f41",
"sensitive_content": null,
"source": null
},
"sensitive_attributes": [
[
{
"type": "get_attr",
"value": "sensitive_content"
}
]
]
},
{
"index_key": "router",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "njf/wYpFb5ImQRiZ3YEtlJyHfaDLYpOurAQXWGHS0yk=",
"content_base64sha512": "DGJTxAeNaxEZ5jIwQ490ajS9Jz3Pwwoc8bdkUqXxVtrvzCY3D55jHJFBxVTaM4ydaFvSr+OIYrl4xRPkJZzvqA==",
"content_md5": "b7fb63925c4c990b7f5ce9ef322bbb6f",
"content_sha1": "ca224221aeef923ffe0bc87191700796000445c5",
"content_sha256": "9e37ffc18a456f9226411899dd812d949c877da0cb6293aeac04175861d2d329",
"content_sha512": "0c6253c4078d6b1119e63230438f746a34bd273dcfc30a1cf1b76452a5f156daefcc26370f9e631c9141c554da338c9d685bd2afe38862b978c513e4259cefa8",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/router.tryton.geeraert.eu.conf",
"id": "ca224221aeef923ffe0bc87191700796000445c5",
"sensitive_content": null,
"source": null
},
@@ -211,18 +239,18 @@
"index_key": "sonarr",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "mp3AObi9eXjcUlCXGqwSTLBuyzIgESMoPatl7YzY0uM=",
"content_base64sha512": "pcKbU6H2METIsmx2WMr0GjHF35s6zX6BtMaYLNwFYL2x+JjWIoWuJh/XJEozSnN+EdQnYuLG9VisYnZRtyJwdw==",
"content_md5": "b050dc3f5273d7d59a89d1aef51b9f6c",
"content_sha1": "02cdb271fc2a79c9a8d4363fe1fed714fb55fb1a",
"content_sha256": "9a9dc039b8bd7978dc5250971aac124cb06ecb32201123283dab65ed8cd8d2e3",
"content_sha512": "a5c29b53a1f63044c8b26c7658caf41a31c5df9b3acd7e81b4c6982cdc0560bdb1f898d62285ae261fd7244a334a737e11d42762e2c6f558ac627651b7227077",
"content_base64sha256": "ogl7lzDmLVQKvmFcOptPeMl/DkjJ0R3HaFaZVmMFELU=",
"content_base64sha512": "IQucxWz1MBveWGz9bUJIwiI3CyCs43DbX5MYROJqcqnwZ3ahClZuwEzsgF+gVmOZ2Epki8ku7jM3f2tH6Hvs3w==",
"content_md5": "7cd01a3f613ab45bbdcf7b913ec2f852",
"content_sha1": "0546c5f745a991a885ead9fddca604cccd996fd9",
"content_sha256": "a2097b9730e62d540abe615c3a9b4f78c97f0e48c9d11dc768569956630510b5",
"content_sha512": "210b9cc56cf5301bde586cfd6d4248c222370b20ace370db5f931844e26a72a9f06776a10a566ec04cec805fa0566399d84a648bc92eee33377f6b47e87becdf",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/sonarr.tryton.geeraert.eu.conf",
"id": "02cdb271fc2a79c9a8d4363fe1fed714fb55fb1a",
"id": "0546c5f745a991a885ead9fddca604cccd996fd9",
"sensitive_content": null,
"source": null
},