pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🎨 enable externalTrafficPolicy: Local option to forward external IP

Browse Source
This commit is contained in:
pi-ux-ce
2024-07-29 14:16:43 +01:00
parent 0f6eb95f20
commit 05fc32f18a
16 changed files with 324 additions and 221 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/variables.auto.tfvars
+39 -24
View File
@@ -6,6 +6,7 @@ nginx_sites = {
extra-value = false
http2_bool = true
proxy_pass_https = false
authentication_required = false
}
bookstack = {
@@ -15,7 +16,7 @@ nginx_sites = {
extra-value = false
http2_bool = false
proxy_pass_https = false
authentication_required = false
}
django = {
service = "webserver.django-python.svc:8000"
@@ -24,7 +25,8 @@ nginx_sites = {
extra-value = false
http2_bool = true
proxy_pass_https = false
}
authentication_required = false
}
echo = {
service = "echo-server.echo-server.svc:80"
proxy_cache = true
@@ -32,6 +34,7 @@ nginx_sites = {
extra-value = false
http2_bool = true
proxy_pass_https = false
authentication_required = false
}
gitlab = {
service = "webserver.gitlab.svc:443"
@@ -43,6 +46,7 @@ client_max_body_size 20m;
EOT
http2_bool = true
proxy_pass_https = true
authentication_required = false
}
sonarr = {
service = "sonarr.servarr.svc"
@@ -52,7 +56,7 @@ client_max_body_size 20m;
extra-value = <<EOT
EOT
proxy_pass_https = false
authentication_required = false
}
keycloak = {
@@ -67,30 +71,41 @@ client_max_body_size 20m;
real_ip_recursive on;
EOT
proxy_pass_https = false
authentication_required = false
}
nextcloud = {
service = "webserver.nextcloud.svc"
proxy_cache = true
extra_value_bool = true
http2_bool = true
extra-value = <<EOT
# nextcloud = {
# service = "webserver.nextcloud.svc"
# proxy_cache = true
# extra_value_bool = true
# http2_bool = true
# extra-value = <<EOT#
#
#
# location /.well-known/carddav {
# return 301 $scheme://$host/remote.php/dav;
# }
#
# location /.well-known/caldav {
# return 301 $scheme://$host/remote.php/dav;
# }
#
# location = /health {
# default_type text/html;
# return 200 "<!DOCTYPE html><h2>health check</h2>\n";
# }
# EOT
# proxy_pass_https = false
# authentication_required = false
# }
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
location = /health {
default_type text/html;
return 200 "<!DOCTYPE html><h2>health check</h2>\n";
}
EOT
router = {
service = "192.168.88.1"
proxy_cache = false
extra_value_bool = false
extra-value = false
http2_bool = false
proxy_pass_https = false
authentication_required = true
}
}