pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🎨 enable externalTrafficPolicy: Local option to forward external IP

Browse Source
This commit is contained in:
pi-ux-ce
2024-07-29 14:16:43 +01:00
parent 0f6eb95f20
commit 05fc32f18a
16 changed files with 324 additions and 221 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Nginx.kube.yaml
+6
View File
@@ -39,6 +39,8 @@ spec:
mountPath: /var/www/certbot/ mountPath: /var/www/certbot/
- name: proxy-cache-path-volume - name: proxy-cache-path-volume
mountPath: /tmp/cache/ mountPath: /tmp/cache/
- name: secret-htpasswd
mountPath: /authentication-htpasswd/
resources: resources:
limits: limits:
cpu: 250m cpu: 250m
@@ -60,6 +62,9 @@ spec:
- name: proxy-cache-path-volume - name: proxy-cache-path-volume
emptyDir: emptyDir:
medium: Memory medium: Memory
- name: secret-htpasswd
secret:
secretName: htpasswd
--- ---
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
@@ -67,6 +72,7 @@ metadata:
name: reverse-proxy name: reverse-proxy
namespace: reverse-proxy namespace: reverse-proxy
spec: spec:
externalTrafficPolicy: Local
ports: ports:
- name: http - name: http
port: 80 port: 80
conf.d/bitwarden.tryton.geeraert.eu.conf
+1
View File
@@ -13,6 +13,7 @@ server {
proxy_pass http://bitwarden_backend; proxy_pass http://bitwarden_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
conf.d/bookstack.tryton.geeraert.eu.conf
+1
View File
@@ -13,6 +13,7 @@ server {
proxy_pass http://bookstack_backend; proxy_pass http://bookstack_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ { location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache; proxy_cache cache;
proxy_cache_key $host$uri$is_args$args; proxy_cache_key $host$uri$is_args$args;
conf.d/django.tryton.geeraert.eu.conf
+1
View File
@@ -13,6 +13,7 @@ server {
proxy_pass http://django_backend; proxy_pass http://django_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ { location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache; proxy_cache cache;
proxy_cache_key $host$uri$is_args$args; proxy_cache_key $host$uri$is_args$args;
conf.d/echo.tryton.geeraert.eu.conf
+1
View File
@@ -13,6 +13,7 @@ server {
proxy_pass http://echo_backend; proxy_pass http://echo_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ { location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache; proxy_cache cache;
proxy_cache_key $host$uri$is_args$args; proxy_cache_key $host$uri$is_args$args;
conf.d/gitlab.tryton.geeraert.eu.conf
+2 -1
View File
@@ -13,12 +13,13 @@ server {
proxy_pass https://gitlab_backend; proxy_pass https://gitlab_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ { location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache; proxy_cache cache;
proxy_cache_key $host$uri$is_args$args; proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m; proxy_cache_valid 200 301 302 30m;
expires 30m; expires 30m;
proxy_pass http://gitlab_backend; proxy_pass https://gitlab_backend;
} }
} }
conf.d/keycloak.tryton.geeraert.eu.conf
+1
View File
@@ -13,6 +13,7 @@ server {
proxy_pass http://keycloak_backend; proxy_pass http://keycloak_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
conf.d/nextcloud.tryton.geeraert.eu.conf
+67 -38
View File
@@ -1,66 +1,95 @@
############################################
# config file for nextcloud
############################################
upstream nextcloud_backend { upstream nextcloud_backend {
server webserver.nextcloud.svc; # server 192.168.88.43; #IP of old tryton server (physical server)
server 1.1.1.1 backup; # server 192.168.88.50:6456; #IP of the docker nextcloud install
server webserver.nextcloud.svc; #using svc dns name
# server 192.168.88.52:31236; #IP of the kubernetes #
# server 1.1.1.1 backup;
} }
server { server {
server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu; server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
location / { location / {
proxy_pass http://nextcloud_backend; proxy_pass http://nextcloud_backend/;
proxy_set_header Upgrade $http_upgrade; location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
proxy_pass http://nextcloud_backend;
}
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache; # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_cache_key $host$uri$is_args$args; # proxy_set_header X-Forwarded-Port $server_port;
proxy_cache_valid 200 301 302 30m; # proxy_set_header X-Forwarded-Scheme $scheme;
expires 30m; # proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://nextcloud_backend; # proxy_set_header X-Real-IP $remote_addr;
} # proxy_set_header Accept-Encoding "";
# proxy_set_header Host $host;
# client_body_buffer_size 512k;
# proxy_read_timeout 86400s;
# client_max_body_size 0;
# Websocket
# proxy_http_version 1.1;
# proxy_set_header Upgrade $http_upgrade;
# proxy_set_header Connection $connection_upgrade;
# proxy_pass_request_headers on;
# proxy_no_cache $cookie_nocache $arg_nocache$arg_comment;
# proxy_no_cache $http_pragma $http_authorization;
# proxy_cache_bypass $cookie_nocache $arg_nocache $arg_comment;
# proxy_cache_bypass $http_pragma $http_authorization;
# proxy_set_header HTTP_AUTHORIZATION $http_authorization;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
location /.well-known/carddav { }
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
location = /health { location = /health {
default_type text/html; default_type text/html;
return 200 "<!DOCTYPE html><h2>health check</h2>\n"; return 200 "<!DOCTYPE html><h2>health check</h2>\n";
} }
http2 on; # listen 443 ssl; # managed by Certbot
ssl_protocols TLSv1.2; listen 443 ssl;
listen [::]:443 ssl;
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
if ($host = www.nextcloud.tryton.geeraert.eu) { if ($host = www.nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} } # managed by Certbot
if ($host = nextcloud.tryton.geeraert.eu) { if ($host = nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} } # managed by Certbot
server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu; server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;
listen 80; listen 80;
return 404; return 404; # managed by Certbot
} }
conf.d/router.tryton.geeraert.eu.conf
Regular → Executable
+25 -20
View File
@@ -1,40 +1,45 @@
############################################
# config file for router
############################################
upstream router_backend { upstream router_backend {
server 192.168.88.1; server 192.168.88.1;
server 1.1.1.1 backup; server 1.1.1.1 backup;
} }
server { server {
server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu; server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;
location / { location / {
proxy_pass http://router_backend; proxy_pass http://router_backend;
proxy_set_header Upgrade $http_upgrade;
auth_basic "Administrator’s Area";
auth_basic_user_file /authentication-htpasswd/.htpasswd;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
if ($host = www.router.tryton.geeraert.eu) { if ($host = www.router.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
if ($host = router.tryton.geeraert.eu) { if ($host = router.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu; server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;
listen 80; listen 80;
return 404; # managed by Certbot return 404;
} }
conf.d/sonarr.tryton.geeraert.eu.conf
+1
View File
@@ -13,6 +13,7 @@ server {
proxy_pass http://sonarr_backend; proxy_pass http://sonarr_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
htpasswd.secret.yaml
+8
View File
@@ -0,0 +1,8 @@
apiVersion: v1
data:
.htpasswd: cGktdXgtY2U6JGFwcjEkMkZVbmpnUzQkaEpubzNTMnhTcURnREZsUDRmNlVwMQo=
kind: Secret
metadata:
creationTimestamp: null
name: htpasswd
namespace: reverse-proxy
terraform/module.tf
+2 -1
View File
@@ -10,7 +10,7 @@ variable "nginx_sites" {
extra_value_bool = bool extra_value_bool = bool
http2_bool = bool http2_bool = bool
proxy_pass_https = bool proxy_pass_https = bool
authentication_required = bool
})) }))
} }
@@ -26,6 +26,7 @@ resource "local_file" "nginx"{
extra-value = each.value.extra-value extra-value = each.value.extra-value
http2_bool = each.value.http2_bool http2_bool = each.value.http2_bool
proxy_pass_https = each.value.proxy_pass_https proxy_pass_https = each.value.proxy_pass_https
authentication_required = each.value.authentication_required
}) })
filename = "../conf.d/${each.key}.tryton.geeraert.eu.conf" filename = "../conf.d/${each.key}.tryton.geeraert.eu.conf"
terraform/nginx_config.tftpl
+5 -1
View File
@@ -12,13 +12,17 @@ server {
location / { location / {
proxy_pass %{ if proxy_pass_https}https%{else}http%{ endif }://${name_site}_backend; proxy_pass %{ if proxy_pass_https}https%{else}http%{ endif }://${name_site}_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
%{ if authentication_required}
auth_basic "Administrator’s Area";
auth_basic_user_file /authentication-htpasswd/.htpasswd;
%{ endif }
%{ if proxy_cache} %{ if proxy_cache}
location ~* \.(html|css|jpg|gif|ico|js)$ { location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache; proxy_cache cache;
proxy_cache_key $host$uri$is_args$args; proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m; proxy_cache_valid 200 301 302 30m;
expires 30m; expires 30m;
proxy_pass http://${name_site}_backend; proxy_pass %{ if proxy_pass_https}https%{else}http%{ endif }://${name_site}_backend;
} }
%{ endif } %{ endif }
} }
terraform/terraform.tfstate
+67 -67
View File
@@ -1,7 +1,7 @@
{ {
"version": 4, "version": 4,
"terraform_version": "1.9.2", "terraform_version": "1.9.2",
"serial": 244, "serial": 271,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e", "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": {}, "outputs": {},
"resources": [ "resources": [
@@ -15,18 +15,18 @@
"index_key": "bitwarden", "index_key": "bitwarden",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "XN7ic3fzE2fjVEJ4L9Y9iZEcFDOmNNoJDpp2B8mMCZg=", "content_base64sha256": "JD4ymKdXbyoqGmFDyaTYyOeFMApP8ui0CK27BEFTlv4=",
"content_base64sha512": "JVJeUaglBTTy1HIT93HAuHSvvPbJUlD9XEpCuoz7iyweavQ9lX9d7mwMcj6/BCz3KVX6HsouUBJf/boSFXxtEA==", "content_base64sha512": "+W/Tt7sUJgbfsemzIllJerKMRV+8kWY2gQPiT+usc8X+BQN9yQw2XeEBQWrI4lnMi5nNeGnQwrMVBf12NNSgNA==",
"content_md5": "ab572c62b93ae264e5caef9c47893901", "content_md5": "a45c5f5e3c0917328b796ef0c8fb341f",
"content_sha1": "480650377a31be839976ea710af6b0724a0c5ecb", "content_sha1": "465a5641ab92e18f860026171da4087e783908c2",
"content_sha256": "5cdee27377f31367e35442782fd63d89911c1433a634da090e9a7607c98c0998", "content_sha256": "243e3298a7576f2a2a1a6143c9a4d8c8e785300a4ff2e8b408adbb04415396fe",
"content_sha512": "25525e51a8250534f2d47213f771c0b874afbcf6c95250fd5c4a42ba8cfb8b2c1e6af43d957f5dee6c0c723ebf042cf72955fa1eca2e50125ffdba12157c6d10", "content_sha512": "f96fd3b7bb142606dfb1e9b32259497ab28c455fbc9166368103e24febac73c5fe05037dc90c365de101416ac8e259cc8b99cd7869d0c2b31505fd7634d4a034",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/bitwarden.tryton.geeraert.eu.conf", "filename": "../conf.d/bitwarden.tryton.geeraert.eu.conf",
"id": "480650377a31be839976ea710af6b0724a0c5ecb", "id": "465a5641ab92e18f860026171da4087e783908c2",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -43,18 +43,18 @@
"index_key": "bookstack", "index_key": "bookstack",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "aYsH5ymxhntZVtl4vYaqyzP+zAvk0O2ccM9unYu1y1Y=", "content_base64sha256": "GKW+AGzci69U9US57isD9rK9jmS0p+WgGyVDSDU7tOc=",
"content_base64sha512": "LNmCmfjbHASt3xKyiwGjSoRm7u68474Sn9H63L3cSkNIa2Gfr9AMRkGPgdD4LvBVv/kqkNLqeuXDMANSf3GCPQ==", "content_base64sha512": "54L4Rtb7T6h3qBlEz5x5mNTN6saXNd5YKRv/BDmCcL3+3vRe3GgMQORFIqWgnoT50eGnbFF7Ptw5AGMVjUIA0Q==",
"content_md5": "f09946f71d2688c9e2afebbf2f4f7889", "content_md5": "0b94b18b43965233baae575ac89470b4",
"content_sha1": "64f42753cce651b104e7f3d68d75762479a5d812", "content_sha1": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
"content_sha256": "698b07e729b1867b5956d978bd86aacb33fecc0be4d0ed9c70cf6e9d8bb5cb56", "content_sha256": "18a5be006cdc8baf54f544b9ee2b03f6b2bd8e64b4a7e5a01b254348353bb4e7",
"content_sha512": "2cd98299f8db1c04addf12b28b01a34a8466eeeebce3be129fd1fadcbddc4a43486b619fafd00c46418f81d0f82ef055bff92a90d2ea7ae5c33003527f71823d", "content_sha512": "e782f846d6fb4fa877a81944cf9c7998d4cdeac69735de58291bff04398270bdfedef45edc680c40e44522a5a09e84f9d1e1a76c517b3edc390063158d4200d1",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/bookstack.tryton.geeraert.eu.conf", "filename": "../conf.d/bookstack.tryton.geeraert.eu.conf",
"id": "64f42753cce651b104e7f3d68d75762479a5d812", "id": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -71,18 +71,18 @@
"index_key": "django", "index_key": "django",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "6xHIa1hXhiel6xtrmjBEPt34z0bqkv+phaDYasHdGcA=", "content_base64sha256": "NYUUncqBHSU1LOUvofn+DbD6oXH5dwwS6U6+iYxiNdc=",
"content_base64sha512": "hNe4PgaKTP4bO2u8qThyNZxenxgkrOXrAJMg1TJSdAYVmPbx8ORSQaFgh3XkYxKa2D7nppXYIO0ZJnQur/zviA==", "content_base64sha512": "nsDPZ/8ZytPFUHviWKWNJ9bleoT7xesFd6UCbmjEZlsoobHgtsFK8715/DbFWl58Z4gKI2FehjaTQRysmhTkkQ==",
"content_md5": "be8ebf24b43a1c75bcc45d8072205822", "content_md5": "909df8117434248989c460305639e1bf",
"content_sha1": "50ff2f0eebc128d77f59ecb019f8d2d793e09202", "content_sha1": "c13ff042844595353c3d242223132c1bb38c52a3",
"content_sha256": "eb11c86b58578627a5eb1b6b9a30443eddf8cf46ea92ffa985a0d86ac1dd19c0", "content_sha256": "3585149dca811d25352ce52fa1f9fe0db0faa171f9770c12e94ebe898c6235d7",
"content_sha512": "84d7b83e068a4cfe1b3b6bbca93872359c5e9f1824ace5eb009320d5325274061598f6f1f0e45241a1608775e463129ad83ee7a695d820ed1926742eaffcef88", "content_sha512": "9ec0cf67ff19cad3c5507be258a58d27d6e57a84fbc5eb0577a5026e68c4665b28a1b1e0b6c14af3bd79fc36c55a5e7c67880a23615e863693411cac9a14e491",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/django.tryton.geeraert.eu.conf", "filename": "../conf.d/django.tryton.geeraert.eu.conf",
"id": "50ff2f0eebc128d77f59ecb019f8d2d793e09202", "id": "c13ff042844595353c3d242223132c1bb38c52a3",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -99,18 +99,18 @@
"index_key": "echo", "index_key": "echo",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "+EEijqWqyaGo1ZJruClDfFPchgpxwEsDJrJCHm/Yrnk=", "content_base64sha256": "X5x5e4cV0J7jBkUJxeEmhMopdqMGb3RwDhhWhQMmJpU=",
"content_base64sha512": "9MAzOThwpomt1ys3Ad2xrNMgMI8YQ24C5PxmGRGPDSkJPSCIX5Jrbz8IatU0PKgdI/0px1aWLNE3nst1OgxQDg==", "content_base64sha512": "PGp5T92ygY98Nqg8poR0spuDkWWEi0LdvQ9Cr/i8WdXR/d6qtRK3xGvdmKxrGAJf0RiLkCjF4EqPmXjSClmFDg==",
"content_md5": "d13df242ce19900c0d437781618ae33b", "content_md5": "b52edcf0233085df596804405baf7738",
"content_sha1": "de236efcfe8e5cb2e69b31449c6f5d81bff483b7", "content_sha1": "741687bc7a81efa7191b55016f721ca8af4f7026",
"content_sha256": "f841228ea5aac9a1a8d5926bb829437c53dc860a71c04b0326b2421e6fd8ae79", "content_sha256": "5f9c797b8715d09ee3064509c5e12684ca2976a3066f74700e18568503262695",
"content_sha512": "f4c033393870a689add72b3701ddb1acd320308f18436e02e4fc6619118f0d29093d20885f926b6f3f086ad5343ca81d23fd29c756962cd1379ecb753a0c500e", "content_sha512": "3c6a794fddb2818f7c36a83ca68474b29b839165848b42ddbd0f42aff8bc59d5d1fddeaab512b7c46bdd98ac6b18025fd1188b9028c5e04a8f9978d20a59850e",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/echo.tryton.geeraert.eu.conf", "filename": "../conf.d/echo.tryton.geeraert.eu.conf",
"id": "de236efcfe8e5cb2e69b31449c6f5d81bff483b7", "id": "741687bc7a81efa7191b55016f721ca8af4f7026",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -127,18 +127,18 @@
"index_key": "gitlab", "index_key": "gitlab",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "N/Vug3Oop20m9/ICeYJ6/x/chY3XjUlhWgn7t9jP2/M=", "content_base64sha256": "nMQLDRENdV/P7v1cIR/aX4nGw0kBpU+0nIZ1+r8iQRg=",
"content_base64sha512": "RHfM7R8ZeNiyuzYTganyOn5DyYW/JoshtONNfW5SC+i+MY02bVvXIkAoXlcPDMmYYkHlJ1q+C3MsmFyibG500w==", "content_base64sha512": "jX4RNpjZVlQcRMXx7UCY6C5V98HXHhYVzAfs9HYXErqTuGV3ENOelfaIhS0L0hkQ9+IbwAcAuj47YnH7lvy/SQ==",
"content_md5": "d9fb48351128393eedfef68ba99eba30", "content_md5": "e31c601485fef122d75ed3bb751b1bdc",
"content_sha1": "850e27a643e0c3f48fa2fcd27856cb6f2571fd93", "content_sha1": "212a6846b84aa479989edd1bf6c37071d27845f7",
"content_sha256": "37f56e8373a8a76d26f7f20279827aff1fdc858dd78d49615a09fbb7d8cfdbf3", "content_sha256": "9cc40b0d110d755fcfeefd5c211fda5f89c6c34901a54fb49c8675fabf224118",
"content_sha512": "4477cced1f1978d8b2bb361381a9f23a7e43c985bf268b21b4e34d7d6e520be8be318d366d5bd72240285e570f0cc9986241e5275abe0b732c985ca26c6e74d3", "content_sha512": "8d7e113698d956541c44c5f1ed4098e82e55f7c1d71e1615cc07ecf4761712ba93b8657710d39e95f688852d0bd21910f7e21bc00700ba3e3b6271fb96fcbf49",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/gitlab.tryton.geeraert.eu.conf", "filename": "../conf.d/gitlab.tryton.geeraert.eu.conf",
"id": "850e27a643e0c3f48fa2fcd27856cb6f2571fd93", "id": "212a6846b84aa479989edd1bf6c37071d27845f7",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -155,18 +155,18 @@
"index_key": "keycloak", "index_key": "keycloak",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "UHQ7kLIOKcsrZtyUF7945TH1hCoZROX1yY4fb1tJjdY=", "content_base64sha256": "YDFo6C+Gs7zO9iejyV1lsi8sOkQv/tphpaAoRVzhloA=",
"content_base64sha512": "W7ubrC73Q0kDBDChkMkUq3eIL6bk2KP2Va7DwY4MlsdSJkB5t+Zjlq4KVqKAcNXi3xpkmE3DY1RXsVIjDA0yKg==", "content_base64sha512": "PL4RKM5RHoOmpR6W+y0MldSYuzcnVZulmd0HcxlVZVsQJGZ5ojLwD5JpaEERWhBVYCzUnw1VAJtoI7lsjtmtxg==",
"content_md5": "ee110e6ec86def55c44023774c8ea9eb", "content_md5": "a2a34e96e2e727aba3b0d3b1406d8a6d",
"content_sha1": "1ba4e7057a8f8641ff1e7b2d7c3dc41d5e6f749d", "content_sha1": "3d802085939bb6502442b257438f8d6508eb7dba",
"content_sha256": "50743b90b20e29cb2b66dc9417bf78e531f5842a1944e5f5c98e1f6f5b498dd6", "content_sha256": "603168e82f86b3bccef627a3c95d65b22f2c3a442ffeda61a5a028455ce19680",
"content_sha512": "5bbb9bac2ef74349030430a190c914ab77882fa6e4d8a3f655aec3c18e0c96c752264079b7e66396ae0a56a28070d5e2df1a64984dc3635457b152230c0d322a", "content_sha512": "3cbe1128ce511e83a6a51e96fb2d0c95d498bb3727559ba599dd07731955655b10246679a232f00f92696841115a1055602cd49f0d55009b6823b96c8ed9adc6",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/keycloak.tryton.geeraert.eu.conf", "filename": "../conf.d/keycloak.tryton.geeraert.eu.conf",
"id": "1ba4e7057a8f8641ff1e7b2d7c3dc41d5e6f749d", "id": "3d802085939bb6502442b257438f8d6508eb7dba",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -180,21 +180,21 @@
] ]
}, },
{ {
"index_key": "nextcloud", "index_key": "router",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "4t+YENqsJPHe/4+B3zMQZntzGmd7kUmkhtkl3NyTM20=", "content_base64sha256": "njf/wYpFb5ImQRiZ3YEtlJyHfaDLYpOurAQXWGHS0yk=",
"content_base64sha512": "M3fSSr1sD0gGm80dpkk3lIMwUxIMBqYA65rnaTrdgpWxz06vny7KHQ0Zk+HJPb1NC8DU8WjCENAnCUcKF51tWw==", "content_base64sha512": "DGJTxAeNaxEZ5jIwQ490ajS9Jz3Pwwoc8bdkUqXxVtrvzCY3D55jHJFBxVTaM4ydaFvSr+OIYrl4xRPkJZzvqA==",
"content_md5": "1b590a6df719896e97522071fe9d4924", "content_md5": "b7fb63925c4c990b7f5ce9ef322bbb6f",
"content_sha1": "599f0c6e27f4f23f1ed88bbcf30f5280831a445b", "content_sha1": "ca224221aeef923ffe0bc87191700796000445c5",
"content_sha256": "e2df9810daac24f1deff8f81df3310667b731a677b9149a486d925dcdc93336d", "content_sha256": "9e37ffc18a456f9226411899dd812d949c877da0cb6293aeac04175861d2d329",
"content_sha512": "3377d24abd6c0f48069bcd1da6493794833053120c06a600eb9ae7693add8295b1cf4eaf9f2eca1d0d1993e1c93dbd4d0bc0d4f168c210d02709470a179d6d5b", "content_sha512": "0c6253c4078d6b1119e63230438f746a34bd273dcfc30a1cf1b76452a5f156daefcc26370f9e631c9141c554da338c9d685bd2afe38862b978c513e4259cefa8",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/nextcloud.tryton.geeraert.eu.conf", "filename": "../conf.d/router.tryton.geeraert.eu.conf",
"id": "599f0c6e27f4f23f1ed88bbcf30f5280831a445b", "id": "ca224221aeef923ffe0bc87191700796000445c5",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -211,18 +211,18 @@
"index_key": "sonarr", "index_key": "sonarr",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "wFVC3EDDEnh78WdSFy2rY66ztZiHStRR4exbuxvVzOI=", "content_base64sha256": "ogl7lzDmLVQKvmFcOptPeMl/DkjJ0R3HaFaZVmMFELU=",
"content_base64sha512": "HOyoR3ON0QGutDBz6AicVs/udVi1HCp0GWc/lb2L7iueOF5Afa3+3Fm4cpSB1HZYWZAu+by+0L2kCLczbQw3fA==", "content_base64sha512": "IQucxWz1MBveWGz9bUJIwiI3CyCs43DbX5MYROJqcqnwZ3ahClZuwEzsgF+gVmOZ2Epki8ku7jM3f2tH6Hvs3w==",
"content_md5": "959dcb7c11510dd03c1a6ac8922becb3", "content_md5": "7cd01a3f613ab45bbdcf7b913ec2f852",
"content_sha1": "58691959f5b23d94a28bf6ef4ba3ee09f8619da6", "content_sha1": "0546c5f745a991a885ead9fddca604cccd996fd9",
"content_sha256": "c05542dc40c312787bf16752172dab63aeb3b598874ad451e1ec5bbb1bd5cce2", "content_sha256": "a2097b9730e62d540abe615c3a9b4f78c97f0e48c9d11dc768569956630510b5",
"content_sha512": "1ceca847738dd101aeb43073e8089c56cfee7558b51c2a7419673f95bd8bee2b9e385e407dadfedc59b8729481d4765859902ef9bcbed0bda408b7336d0c377c", "content_sha512": "210b9cc56cf5301bde586cfd6d4248c222370b20ace370db5f931844e26a72a9f06776a10a566ec04cec805fa0566399d84a648bc92eee33377f6b47e87becdf",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/sonarr.tryton.geeraert.eu.conf", "filename": "../conf.d/sonarr.tryton.geeraert.eu.conf",
"id": "58691959f5b23d94a28bf6ef4ba3ee09f8619da6", "id": "0546c5f745a991a885ead9fddca604cccd996fd9",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
terraform/terraform.tfstate.backup
+93 -65
View File
@@ -1,7 +1,7 @@
{ {
"version": 4, "version": 4,
"terraform_version": "1.9.2", "terraform_version": "1.9.2",
"serial": 227, "serial": 270,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e", "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": {}, "outputs": {},
"resources": [ "resources": [
@@ -15,18 +15,18 @@
"index_key": "bitwarden", "index_key": "bitwarden",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "MiHDPlxHGVzvr8FZTUvk8du6fgMi5XPAEGX5dZsiNPM=", "content_base64sha256": "JD4ymKdXbyoqGmFDyaTYyOeFMApP8ui0CK27BEFTlv4=",
"content_base64sha512": "YEfT6PCNp1W67sYhWvVqiSeT6f1CoNyMELFWSuhbEmd/TKWM7yUN6bv2btg9/9fNys+TSR2gwVPyVYkQ+lhIUw==", "content_base64sha512": "+W/Tt7sUJgbfsemzIllJerKMRV+8kWY2gQPiT+usc8X+BQN9yQw2XeEBQWrI4lnMi5nNeGnQwrMVBf12NNSgNA==",
"content_md5": "81e123c4be15ae3c3dfade15cc7f0514", "content_md5": "a45c5f5e3c0917328b796ef0c8fb341f",
"content_sha1": "d390acbf0d02c5e29658cfb2b078fc123e09f821", "content_sha1": "465a5641ab92e18f860026171da4087e783908c2",
"content_sha256": "3221c33e5c47195cefafc1594d4be4f1dbba7e0322e573c01065f9759b2234f3", "content_sha256": "243e3298a7576f2a2a1a6143c9a4d8c8e785300a4ff2e8b408adbb04415396fe",
"content_sha512": "6047d3e8f08da755baeec6215af56a892793e9fd42a0dc8c10b1564ae85b12677f4ca58cef250de9bbf66ed83dffd7cdcacf93491da0c153f2558910fa584853", "content_sha512": "f96fd3b7bb142606dfb1e9b32259497ab28c455fbc9166368103e24febac73c5fe05037dc90c365de101416ac8e259cc8b99cd7869d0c2b31505fd7634d4a034",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/bitwarden.tryton.geeraert.eu.conf", "filename": "../conf.d/bitwarden.tryton.geeraert.eu.conf",
"id": "d390acbf0d02c5e29658cfb2b078fc123e09f821", "id": "465a5641ab92e18f860026171da4087e783908c2",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -43,18 +43,18 @@
"index_key": "bookstack", "index_key": "bookstack",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "urzNcqSqLBKi0eHnlSq9xIMwmU0f4sBTXaFDbj/PmTc=", "content_base64sha256": "GKW+AGzci69U9US57isD9rK9jmS0p+WgGyVDSDU7tOc=",
"content_base64sha512": "3Aw+n9/OZZNT3BTEUyRJaPFN158evN8rRJPJN1n+mJBVgGnlAhzFCB1UD+Uq/D5wmalEiDEcDyj+3K0A6nsxNw==", "content_base64sha512": "54L4Rtb7T6h3qBlEz5x5mNTN6saXNd5YKRv/BDmCcL3+3vRe3GgMQORFIqWgnoT50eGnbFF7Ptw5AGMVjUIA0Q==",
"content_md5": "1f14b6c64301c3fb014258ca423e5d44", "content_md5": "0b94b18b43965233baae575ac89470b4",
"content_sha1": "45c72d585c88b10777c567f7516dc03ed5ece3f5", "content_sha1": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
"content_sha256": "babccd72a4aa2c12a2d1e1e7952abdc48330994d1fe2c0535da1436e3fcf9937", "content_sha256": "18a5be006cdc8baf54f544b9ee2b03f6b2bd8e64b4a7e5a01b254348353bb4e7",
"content_sha512": "dc0c3e9fdfce659353dc14c453244968f14dd79f1ebcdf2b4493c93759fe9890558069e5021cc5081d540fe52afc3e7099a94488311c0f28fedcad00ea7b3137", "content_sha512": "e782f846d6fb4fa877a81944cf9c7998d4cdeac69735de58291bff04398270bdfedef45edc680c40e44522a5a09e84f9d1e1a76c517b3edc390063158d4200d1",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/bookstack.tryton.geeraert.eu.conf", "filename": "../conf.d/bookstack.tryton.geeraert.eu.conf",
"id": "45c72d585c88b10777c567f7516dc03ed5ece3f5", "id": "8cd06634fd52b629e1586fa44dc9c4f06852e050",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -71,18 +71,18 @@
"index_key": "django", "index_key": "django",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "G0+lIbHzq0HLNQKkoxvJaWs3byjSIOnQxcv2SbDM1wU=", "content_base64sha256": "NYUUncqBHSU1LOUvofn+DbD6oXH5dwwS6U6+iYxiNdc=",
"content_base64sha512": "RV3xxzLaD23UvfJkh4/1fCB0V696nGSiT94tCQhVQSnTnNMGYnuivQjYiLu6Pw9YbpWK5XG0WYwv0vRmhPE+7A==", "content_base64sha512": "nsDPZ/8ZytPFUHviWKWNJ9bleoT7xesFd6UCbmjEZlsoobHgtsFK8715/DbFWl58Z4gKI2FehjaTQRysmhTkkQ==",
"content_md5": "244193e3cb28880614c1ca8cab4a3e70", "content_md5": "909df8117434248989c460305639e1bf",
"content_sha1": "2b1b9ae48437555e29b661a44c7c2be3fb426c27", "content_sha1": "c13ff042844595353c3d242223132c1bb38c52a3",
"content_sha256": "1b4fa521b1f3ab41cb3502a4a31bc9696b376f28d220e9d0c5cbf649b0ccd705", "content_sha256": "3585149dca811d25352ce52fa1f9fe0db0faa171f9770c12e94ebe898c6235d7",
"content_sha512": "455df1c732da0f6dd4bdf264878ff57c207457af7a9c64a24fde2d0908554129d39cd306627ba2bd08d888bbba3f0f586e958ae571b4598c2fd2f46684f13eec", "content_sha512": "9ec0cf67ff19cad3c5507be258a58d27d6e57a84fbc5eb0577a5026e68c4665b28a1b1e0b6c14af3bd79fc36c55a5e7c67880a23615e863693411cac9a14e491",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/django.tryton.geeraert.eu.conf", "filename": "../conf.d/django.tryton.geeraert.eu.conf",
"id": "2b1b9ae48437555e29b661a44c7c2be3fb426c27", "id": "c13ff042844595353c3d242223132c1bb38c52a3",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -99,18 +99,18 @@
"index_key": "echo", "index_key": "echo",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "3QkycNqzv6TJ/gLM8FHnCYOJ4kaF+2SlZB1ndpqppa4=", "content_base64sha256": "X5x5e4cV0J7jBkUJxeEmhMopdqMGb3RwDhhWhQMmJpU=",
"content_base64sha512": "eky5CjdfBdtm14lZslFWyqg6NzSZ5r3Hs4OK//JlK+sST/j82bgytt+rilNi6dBe2Tw5+UsuDA6TtjNk95qfKw==", "content_base64sha512": "PGp5T92ygY98Nqg8poR0spuDkWWEi0LdvQ9Cr/i8WdXR/d6qtRK3xGvdmKxrGAJf0RiLkCjF4EqPmXjSClmFDg==",
"content_md5": "42a45c7f53bc9ae13e903de204fa8ff0", "content_md5": "b52edcf0233085df596804405baf7738",
"content_sha1": "2b3b100424ab1866e9597c1ea9fbc44d2b32ee67", "content_sha1": "741687bc7a81efa7191b55016f721ca8af4f7026",
"content_sha256": "dd093270dab3bfa4c9fe02ccf051e7098389e24685fb64a5641d67769aa9a5ae", "content_sha256": "5f9c797b8715d09ee3064509c5e12684ca2976a3066f74700e18568503262695",
"content_sha512": "7a4cb90a375f05db66d78959b25156caa83a373499e6bdc7b3838afff2652beb124ff8fcd9b832b6dfab8a5362e9d05ed93c39f94b2e0c0e93b63364f79a9f2b", "content_sha512": "3c6a794fddb2818f7c36a83ca68474b29b839165848b42ddbd0f42aff8bc59d5d1fddeaab512b7c46bdd98ac6b18025fd1188b9028c5e04a8f9978d20a59850e",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/echo.tryton.geeraert.eu.conf", "filename": "../conf.d/echo.tryton.geeraert.eu.conf",
"id": "2b3b100424ab1866e9597c1ea9fbc44d2b32ee67", "id": "741687bc7a81efa7191b55016f721ca8af4f7026",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -127,18 +127,18 @@
"index_key": "gitlab", "index_key": "gitlab",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "Yg5Q1OgAoCGr9jtol6cNdhP7x12nzBosJ6u7hp+kw9A=", "content_base64sha256": "nMQLDRENdV/P7v1cIR/aX4nGw0kBpU+0nIZ1+r8iQRg=",
"content_base64sha512": "eZcu+kGxo8KsH1XcSS1rdLEiyxnJL4tzA+8cvipUzjOT2Jen2ugtBE+nqWUtwxBcP176znvpVFGoy4kBnoPSzw==", "content_base64sha512": "jX4RNpjZVlQcRMXx7UCY6C5V98HXHhYVzAfs9HYXErqTuGV3ENOelfaIhS0L0hkQ9+IbwAcAuj47YnH7lvy/SQ==",
"content_md5": "fa125ab7b89e4f43663be6561acf24ec", "content_md5": "e31c601485fef122d75ed3bb751b1bdc",
"content_sha1": "ee9cd14ea17ca1316250ec16eede425158abb453", "content_sha1": "212a6846b84aa479989edd1bf6c37071d27845f7",
"content_sha256": "620e50d4e800a021abf63b6897a70d7613fbc75da7cc1a2c27abbb869fa4c3d0", "content_sha256": "9cc40b0d110d755fcfeefd5c211fda5f89c6c34901a54fb49c8675fabf224118",
"content_sha512": "79972efa41b1a3c2ac1f55dc492d6b74b122cb19c92f8b7303ef1cbe2a54ce3393d897a7dae82d044fa7a9652dc3105c3f5eface7be95451a8cb89019e83d2cf", "content_sha512": "8d7e113698d956541c44c5f1ed4098e82e55f7c1d71e1615cc07ecf4761712ba93b8657710d39e95f688852d0bd21910f7e21bc00700ba3e3b6271fb96fcbf49",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/gitlab.tryton.geeraert.eu.conf", "filename": "../conf.d/gitlab.tryton.geeraert.eu.conf",
"id": "ee9cd14ea17ca1316250ec16eede425158abb453", "id": "212a6846b84aa479989edd1bf6c37071d27845f7",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -155,18 +155,18 @@
"index_key": "keycloak", "index_key": "keycloak",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "C9ncNPhDpmhIg3cqfCGbRGQrLA8GiOzkn/28lVhNruk=", "content_base64sha256": "YDFo6C+Gs7zO9iejyV1lsi8sOkQv/tphpaAoRVzhloA=",
"content_base64sha512": "QpJ6nxvIBfooa8km+URzuNcZMgq5/7pKxd3dnlRlOs7scNuHzRAJaV9Jfl9XDTmDGWR2l9N8qecc0G2HbWnJXA==", "content_base64sha512": "PL4RKM5RHoOmpR6W+y0MldSYuzcnVZulmd0HcxlVZVsQJGZ5ojLwD5JpaEERWhBVYCzUnw1VAJtoI7lsjtmtxg==",
"content_md5": "5f2d3f68bf54b78ca6ca7064ff7cd36a", "content_md5": "a2a34e96e2e727aba3b0d3b1406d8a6d",
"content_sha1": "aa739ee51ae97e619b16659de7621da9d47a18e5", "content_sha1": "3d802085939bb6502442b257438f8d6508eb7dba",
"content_sha256": "0bd9dc34f843a6684883772a7c219b44642b2c0f0688ece49ffdbc95584daee9", "content_sha256": "603168e82f86b3bccef627a3c95d65b22f2c3a442ffeda61a5a028455ce19680",
"content_sha512": "42927a9f1bc805fa286bc926f94473b8d719320ab9ffba4ac5dddd9e54653aceec70db87cd1009695f497e5f570d398319647697d37ca9e71cd06d876d69c95c", "content_sha512": "3cbe1128ce511e83a6a51e96fb2d0c95d498bb3727559ba599dd07731955655b10246679a232f00f92696841115a1055602cd49f0d55009b6823b96c8ed9adc6",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/keycloak.tryton.geeraert.eu.conf", "filename": "../conf.d/keycloak.tryton.geeraert.eu.conf",
"id": "aa739ee51ae97e619b16659de7621da9d47a18e5", "id": "3d802085939bb6502442b257438f8d6508eb7dba",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -183,18 +183,46 @@
"index_key": "nextcloud", "index_key": "nextcloud",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "Wuh7w2VWja7APrAI+S7GO/IXNoUzZ4e9wzFbAZ5Ppts=", "content_base64sha256": "gbQo8yOBGcppHaTeMsz5im06QF/qpCT3Bp71cH5Bjxs=",
"content_base64sha512": "8P6Im51F8nDVM/ia7TlznoRL85rf2VsXCgT+gUjNGlFPq77x7lVQnNLa0dGRzNBRTxiyHm/iH7LEeJHpFxWfcQ==", "content_base64sha512": "+01kkixXQa8TWOgxh1aZ9n02z9A6QFukzkWZbLAgGFAht8o+GdLLFkofFlMnKF3Mza38ej4hp2k8q+HSpAw2+Q==",
"content_md5": "e3770a49a60296c2a67bfd5de70fa1b6", "content_md5": "81b7335261de0349a460744fe4598d96",
"content_sha1": "d0224436372caefd1d60881cf282cda3e2c0a9c2", "content_sha1": "6c4e70985067644ed9707a8b02f39b5ff2236f41",
"content_sha256": "5ae87bc365568daec03eb008f92ec63bf2173685336787bdc3315b019e4fa6db", "content_sha256": "81b428f3238119ca691da4de32ccf98a6d3a405feaa424f7069ef5707e418f1b",
"content_sha512": "f0fe889b9d45f270d533f89aed39739e844bf39adfd95b170a04fe8148cd1a514fabbef1ee55509cd2dad1d191ccd0514f18b21e6fe21fb2c47891e917159f71", "content_sha512": "fb4d64922c5741af1358e831875699f67d36cfd03a405ba4ce45996cb020185021b7ca3e19d2cb164a1f165327285dcccdadfc7a3e21a7693cabe1d2a40c36f9",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/nextcloud.tryton.geeraert.eu.conf", "filename": "../conf.d/nextcloud.tryton.geeraert.eu.conf",
"id": "d0224436372caefd1d60881cf282cda3e2c0a9c2", "id": "6c4e70985067644ed9707a8b02f39b5ff2236f41",
"sensitive_content": null,
"source": null
},
"sensitive_attributes": [
[
{
"type": "get_attr",
"value": "sensitive_content"
}
]
]
},
{
"index_key": "router",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "njf/wYpFb5ImQRiZ3YEtlJyHfaDLYpOurAQXWGHS0yk=",
"content_base64sha512": "DGJTxAeNaxEZ5jIwQ490ajS9Jz3Pwwoc8bdkUqXxVtrvzCY3D55jHJFBxVTaM4ydaFvSr+OIYrl4xRPkJZzvqA==",
"content_md5": "b7fb63925c4c990b7f5ce9ef322bbb6f",
"content_sha1": "ca224221aeef923ffe0bc87191700796000445c5",
"content_sha256": "9e37ffc18a456f9226411899dd812d949c877da0cb6293aeac04175861d2d329",
"content_sha512": "0c6253c4078d6b1119e63230438f746a34bd273dcfc30a1cf1b76452a5f156daefcc26370f9e631c9141c554da338c9d685bd2afe38862b978c513e4259cefa8",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/router.tryton.geeraert.eu.conf",
"id": "ca224221aeef923ffe0bc87191700796000445c5",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
@@ -211,18 +239,18 @@
"index_key": "sonarr", "index_key": "sonarr",
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", "content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null, "content_base64": null,
"content_base64sha256": "mp3AObi9eXjcUlCXGqwSTLBuyzIgESMoPatl7YzY0uM=", "content_base64sha256": "ogl7lzDmLVQKvmFcOptPeMl/DkjJ0R3HaFaZVmMFELU=",
"content_base64sha512": "pcKbU6H2METIsmx2WMr0GjHF35s6zX6BtMaYLNwFYL2x+JjWIoWuJh/XJEozSnN+EdQnYuLG9VisYnZRtyJwdw==", "content_base64sha512": "IQucxWz1MBveWGz9bUJIwiI3CyCs43DbX5MYROJqcqnwZ3ahClZuwEzsgF+gVmOZ2Epki8ku7jM3f2tH6Hvs3w==",
"content_md5": "b050dc3f5273d7d59a89d1aef51b9f6c", "content_md5": "7cd01a3f613ab45bbdcf7b913ec2f852",
"content_sha1": "02cdb271fc2a79c9a8d4363fe1fed714fb55fb1a", "content_sha1": "0546c5f745a991a885ead9fddca604cccd996fd9",
"content_sha256": "9a9dc039b8bd7978dc5250971aac124cb06ecb32201123283dab65ed8cd8d2e3", "content_sha256": "a2097b9730e62d540abe615c3a9b4f78c97f0e48c9d11dc768569956630510b5",
"content_sha512": "a5c29b53a1f63044c8b26c7658caf41a31c5df9b3acd7e81b4c6982cdc0560bdb1f898d62285ae261fd7244a334a737e11d42762e2c6f558ac627651b7227077", "content_sha512": "210b9cc56cf5301bde586cfd6d4248c222370b20ace370db5f931844e26a72a9f06776a10a566ec04cec805fa0566399d84a648bc92eee33377f6b47e87becdf",
"directory_permission": "0777", "directory_permission": "0777",
"file_permission": "0777", "file_permission": "0777",
"filename": "../conf.d/sonarr.tryton.geeraert.eu.conf", "filename": "../conf.d/sonarr.tryton.geeraert.eu.conf",
"id": "02cdb271fc2a79c9a8d4363fe1fed714fb55fb1a", "id": "0546c5f745a991a885ead9fddca604cccd996fd9",
"sensitive_content": null, "sensitive_content": null,
"source": null "source": null
}, },
terraform/variables.auto.tfvars
+39 -24
View File
@@ -6,6 +6,7 @@ nginx_sites = {
extra-value = false extra-value = false
http2_bool = true http2_bool = true
proxy_pass_https = false proxy_pass_https = false
authentication_required = false
} }
bookstack = { bookstack = {
@@ -15,7 +16,7 @@ nginx_sites = {
extra-value = false extra-value = false
http2_bool = false http2_bool = false
proxy_pass_https = false proxy_pass_https = false
authentication_required = false
} }
django = { django = {
service = "webserver.django-python.svc:8000" service = "webserver.django-python.svc:8000"
@@ -24,7 +25,8 @@ nginx_sites = {
extra-value = false extra-value = false
http2_bool = true http2_bool = true
proxy_pass_https = false proxy_pass_https = false
} authentication_required = false
}
echo = { echo = {
service = "echo-server.echo-server.svc:80" service = "echo-server.echo-server.svc:80"
proxy_cache = true proxy_cache = true
@@ -32,6 +34,7 @@ nginx_sites = {
extra-value = false extra-value = false
http2_bool = true http2_bool = true
proxy_pass_https = false proxy_pass_https = false
authentication_required = false
} }
gitlab = { gitlab = {
service = "webserver.gitlab.svc:443" service = "webserver.gitlab.svc:443"
@@ -43,6 +46,7 @@ client_max_body_size 20m;
EOT EOT
http2_bool = true http2_bool = true
proxy_pass_https = true proxy_pass_https = true
authentication_required = false
} }
sonarr = { sonarr = {
service = "sonarr.servarr.svc" service = "sonarr.servarr.svc"
@@ -52,7 +56,7 @@ client_max_body_size 20m;
extra-value = <<EOT extra-value = <<EOT
EOT EOT
proxy_pass_https = false proxy_pass_https = false
authentication_required = false
} }
keycloak = { keycloak = {
@@ -67,30 +71,41 @@ client_max_body_size 20m;
real_ip_recursive on; real_ip_recursive on;
EOT EOT
proxy_pass_https = false proxy_pass_https = false
authentication_required = false
} }
nextcloud = { # nextcloud = {
service = "webserver.nextcloud.svc" # service = "webserver.nextcloud.svc"
proxy_cache = true # proxy_cache = true
extra_value_bool = true # extra_value_bool = true
http2_bool = true # http2_bool = true
extra-value = <<EOT # extra-value = <<EOT#
#
#
# location /.well-known/carddav {
# return 301 $scheme://$host/remote.php/dav;
# }
#
# location /.well-known/caldav {
# return 301 $scheme://$host/remote.php/dav;
# }
#
# location = /health {
# default_type text/html;
# return 200 "<!DOCTYPE html><h2>health check</h2>\n";
# }
# EOT
# proxy_pass_https = false
# authentication_required = false
# }
router = {
location /.well-known/carddav { service = "192.168.88.1"
return 301 $scheme://$host/remote.php/dav; proxy_cache = false
} extra_value_bool = false
extra-value = false
location /.well-known/caldav { http2_bool = false
return 301 $scheme://$host/remote.php/dav;
}
location = /health {
default_type text/html;
return 200 "<!DOCTYPE html><h2>health check</h2>\n";
}
EOT
proxy_pass_https = false proxy_pass_https = false
authentication_required = true
} }
} }