pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

✨ upgrade terraform files to prevent giutlab webui issues

Browse Source
This commit is contained in:
pi-ux-ce
2024-07-29 08:52:22 +01:00
parent 09c4d35c29
commit 0f6eb95f20
13 changed files with 166 additions and 194 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf.d/bitwarden.tryton.geeraert.eu.conf
+1 -5
View File
@@ -11,20 +11,16 @@ server {
server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
location / {
proxy_pass http://bitwarden_backend;
proxy_set_header Upgrade $http_upgrade;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
conf.d/bookstack.tryton.geeraert.eu.conf
Regular → Executable
+1 -4
View File
@@ -11,6 +11,7 @@ server {
server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;
location / {
proxy_pass http://bookstack_backend;
proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
@@ -26,10 +27,6 @@ server {
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
conf.d/django.tryton.geeraert.eu.conf
Regular → Executable
+1 -5
View File
@@ -11,6 +11,7 @@ server {
server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;
location / {
proxy_pass http://django_backend;
proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
@@ -25,14 +26,9 @@ server {
root /var/www/certbot;
}
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
conf.d/echo.tryton.geeraert.eu.conf
Regular → Executable
+1 -5
View File
@@ -11,6 +11,7 @@ server {
server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;
location / {
proxy_pass http://echo_backend;
proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
@@ -25,14 +26,9 @@ server {
root /var/www/certbot;
}
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
conf.d/gitlab.tryton.geeraert.eu.conf
+5 -11
View File
@@ -3,7 +3,7 @@
############################################
upstream gitlab_backend {
server webserver.gitlab.svc;
server webserver.gitlab.svc:443;
server 1.1.1.1 backup;
}
@@ -11,13 +11,14 @@ server {
server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;
location / {
proxy_pass https://gitlab_backend;
proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
proxy_pass https://gitlab_backend;
proxy_pass http://gitlab_backend;
}
}
@@ -25,19 +26,12 @@ server {
root /var/www/certbot;
}
client_max_body_size 20m;
proxy_request_buffering off;
client_max_body_size 20m;
proxy_request_buffering off;
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
conf.d/keycloak.tryton.geeraert.eu.conf
Regular → Executable
+1 -5
View File
@@ -11,6 +11,7 @@ server {
server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;
location / {
proxy_pass http://keycloak_backend;
proxy_set_header Upgrade $http_upgrade;
}
location /.well-known/acme-challenge/ {
@@ -18,16 +19,11 @@ server {
}
set_real_ip_from 0.0.0.0/0;
real_ip_header X-Real-IP;
real_ip_recursive on;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
conf.d/nextcloud.tryton.geeraert.eu.conf
+1 -6
View File
@@ -11,6 +11,7 @@ server {
server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
location / {
proxy_pass http://nextcloud_backend;
proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
@@ -27,7 +28,6 @@ server {
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
@@ -41,14 +41,9 @@ server {
return 200 "<!DOCTYPE html><h2>health check</h2>\n";
}
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
conf.d/sonarr.tryton.geeraert.eu.conf
+1 -4
View File
@@ -11,6 +11,7 @@ server {
server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;
location / {
proxy_pass http://sonarr_backend;
proxy_set_header Upgrade $http_upgrade;
}
location /.well-known/acme-challenge/ {
@@ -18,10 +19,6 @@ server {
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
terraform/module.tf
+3
View File
@@ -9,6 +9,8 @@ variable "nginx_sites" {
extra-value = string
extra_value_bool = bool
http2_bool = bool
proxy_pass_https = bool
}))
}
@@ -23,6 +25,7 @@ resource "local_file" "nginx"{
extra_value_bool = each.value.extra_value_bool
extra-value = each.value.extra-value
http2_bool = each.value.http2_bool
proxy_pass_https = each.value.proxy_pass_https
})
filename = "../conf.d/${each.key}.tryton.geeraert.eu.conf"
terraform/nginx_config.tftpl
+7 -8
View File
@@ -10,7 +10,8 @@ upstream ${name_site}_backend {
server {
server_name ${name_site}.tryton.geeraert.eu www.${name_site}.tryton.geeraert.eu;
location / {
proxy_pass http://${name_site}_backend;
proxy_pass %{ if proxy_pass_https}https%{else}http%{ endif }://${name_site}_backend;
proxy_set_header Upgrade $http_upgrade;
%{ if proxy_cache}
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
@@ -25,15 +26,13 @@ server {
root /var/www/certbot;
}
%{ if extra_value_bool}
${extra-value}
%{ endif }
%{ if http2_bool}
%{~ if extra_value_bool ~}
${extra-value}
%{~ endif ~}
%{~ if http2_bool~}
http2 on;
ssl_protocols TLSv1.2;
%{ endif }
%{~ endif ~}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
terraform/terraform.tfstate
+65 -65
View File
@@ -1,7 +1,7 @@
{
"version": 4,
"terraform_version": "1.9.2",
"serial": 36,
"serial": 244,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": {},
"resources": [
@@ -15,18 +15,18 @@
"index_key": "bitwarden",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "YTpqmEfgRp8OS3TZMNy7SLoTCt3UYNTchR3OITgkjm8=",
"content_base64sha512": "OvZDSCJ9qtm67k7gQt+uTV/NDVtneL3vunKndKspzAk/wPJxqmthkzrv/HQ5l5ptm17YmqGOdkTK6bgkLW+y3w==",
"content_md5": "befd5d886b1d10376671904baac6be2e",
"content_sha1": "5c35d44470c4be38a4513c4211f40cd6e76d5705",
"content_sha256": "613a6a9847e0469f0e4b74d930dcbb48ba130addd460d4dc851dce2138248e6f",
"content_sha512": "3af64348227daad9baee4ee042dfae4d5fcd0d5b6778bdefba72a774ab29cc093fc0f271aa6b61933aeffc7439979a6d9b5ed89aa18e7644cae9b8242d6fb2df",
"content_base64sha256": "XN7ic3fzE2fjVEJ4L9Y9iZEcFDOmNNoJDpp2B8mMCZg=",
"content_base64sha512": "JVJeUaglBTTy1HIT93HAuHSvvPbJUlD9XEpCuoz7iyweavQ9lX9d7mwMcj6/BCz3KVX6HsouUBJf/boSFXxtEA==",
"content_md5": "ab572c62b93ae264e5caef9c47893901",
"content_sha1": "480650377a31be839976ea710af6b0724a0c5ecb",
"content_sha256": "5cdee27377f31367e35442782fd63d89911c1433a634da090e9a7607c98c0998",
"content_sha512": "25525e51a8250534f2d47213f771c0b874afbcf6c95250fd5c4a42ba8cfb8b2c1e6af43d957f5dee6c0c723ebf042cf72955fa1eca2e50125ffdba12157c6d10",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bitwarden.tryton.geeraert.eu.conf",
"id": "5c35d44470c4be38a4513c4211f40cd6e76d5705",
"id": "480650377a31be839976ea710af6b0724a0c5ecb",
"sensitive_content": null,
"source": null
},
@@ -43,18 +43,18 @@
"index_key": "bookstack",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "OXSKkaAcbeozovKy/9nhsyLxfunVe6p3OZz0y+XnFv4=",
"content_base64sha512": "YGVEVKPjCgEqt8hA1k7BX9EyCdYzwtSrQ3v9/Pit63CYm1ip3ChlcOTVwFEg4vl+K+A2sYyAfgOQhglJLDWGCg==",
"content_md5": "f66b1e1c42e4f61b264079cb06117713",
"content_sha1": "d6b587bfdd8fd65d1c167c554274964a73c97308",
"content_sha256": "39748a91a01c6dea33a2f2b2ffd9e1b322f17ee9d57baa77399cf4cbe5e716fe",
"content_sha512": "60654454a3e30a012ab7c840d64ec15fd13209d633c2d4ab437bfdfcf8adeb70989b58a9dc286570e4d5c05120e2f97e2be036b18c807e03908609492c35860a",
"content_base64sha256": "aYsH5ymxhntZVtl4vYaqyzP+zAvk0O2ccM9unYu1y1Y=",
"content_base64sha512": "LNmCmfjbHASt3xKyiwGjSoRm7u68474Sn9H63L3cSkNIa2Gfr9AMRkGPgdD4LvBVv/kqkNLqeuXDMANSf3GCPQ==",
"content_md5": "f09946f71d2688c9e2afebbf2f4f7889",
"content_sha1": "64f42753cce651b104e7f3d68d75762479a5d812",
"content_sha256": "698b07e729b1867b5956d978bd86aacb33fecc0be4d0ed9c70cf6e9d8bb5cb56",
"content_sha512": "2cd98299f8db1c04addf12b28b01a34a8466eeeebce3be129fd1fadcbddc4a43486b619fafd00c46418f81d0f82ef055bff92a90d2ea7ae5c33003527f71823d",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bookstack.tryton.geeraert.eu.conf",
"id": "d6b587bfdd8fd65d1c167c554274964a73c97308",
"id": "64f42753cce651b104e7f3d68d75762479a5d812",
"sensitive_content": null,
"source": null
},
@@ -71,18 +71,18 @@
"index_key": "django",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "JgtzbX0/Lbqprbplt5uLgJIxYOT6UujNXJVeucEvd6k=",
"content_base64sha512": "5CfWA5fW94lfWqGLG6B+PiLi86eSd6qDyCe0oD4T7MfAhgbpTqpLAEuEUm3r8zMUjka/qGKukekKrsjDFadIxw==",
"content_md5": "0adb199fdbe99b316319c99adfa5e161",
"content_sha1": "10fb8bff769effeb34701187825fff1636b1b3b3",
"content_sha256": "260b736d7d3f2dbaa9adba65b79b8b80923160e4fa52e8cd5c955eb9c12f77a9",
"content_sha512": "e427d60397d6f7895f5aa18b1ba07e3e22e2f3a79277aa83c827b4a03e13ecc7c08606e94eaa4b004b84526debf333148e46bfa862ae91e90aaec8c315a748c7",
"content_base64sha256": "6xHIa1hXhiel6xtrmjBEPt34z0bqkv+phaDYasHdGcA=",
"content_base64sha512": "hNe4PgaKTP4bO2u8qThyNZxenxgkrOXrAJMg1TJSdAYVmPbx8ORSQaFgh3XkYxKa2D7nppXYIO0ZJnQur/zviA==",
"content_md5": "be8ebf24b43a1c75bcc45d8072205822",
"content_sha1": "50ff2f0eebc128d77f59ecb019f8d2d793e09202",
"content_sha256": "eb11c86b58578627a5eb1b6b9a30443eddf8cf46ea92ffa985a0d86ac1dd19c0",
"content_sha512": "84d7b83e068a4cfe1b3b6bbca93872359c5e9f1824ace5eb009320d5325274061598f6f1f0e45241a1608775e463129ad83ee7a695d820ed1926742eaffcef88",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/django.tryton.geeraert.eu.conf",
"id": "10fb8bff769effeb34701187825fff1636b1b3b3",
"id": "50ff2f0eebc128d77f59ecb019f8d2d793e09202",
"sensitive_content": null,
"source": null
},
@@ -99,18 +99,18 @@
"index_key": "echo",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "2JB/AZrF5sgi2qN2GV/An7UaQ43+BkANXGsqWoXDnvM=",
"content_base64sha512": "y4xsUka1eLho4KEjbII9KEGpc5sWwm6FoWU1SKXL02HbuJDW6p2WDQwVyaXHm0Oo7Bo1zG25Clf0NO+Xyehn2Q==",
"content_md5": "d5282cd5b3b1751d3e5d7e177852479c",
"content_sha1": "7735c984b3094199e43e74f357351ca36603c4ce",
"content_sha256": "d8907f019ac5e6c822daa376195fc09fb51a438dfe06400d5c6b2a5a85c39ef3",
"content_sha512": "cb8c6c5246b578b868e0a1236c823d2841a9739b16c26e85a1653548a5cbd361dbb890d6ea9d960d0c15c9a5c79b43a8ec1a35cc6db90a57f434ef97c9e867d9",
"content_base64sha256": "+EEijqWqyaGo1ZJruClDfFPchgpxwEsDJrJCHm/Yrnk=",
"content_base64sha512": "9MAzOThwpomt1ys3Ad2xrNMgMI8YQ24C5PxmGRGPDSkJPSCIX5Jrbz8IatU0PKgdI/0px1aWLNE3nst1OgxQDg==",
"content_md5": "d13df242ce19900c0d437781618ae33b",
"content_sha1": "de236efcfe8e5cb2e69b31449c6f5d81bff483b7",
"content_sha256": "f841228ea5aac9a1a8d5926bb829437c53dc860a71c04b0326b2421e6fd8ae79",
"content_sha512": "f4c033393870a689add72b3701ddb1acd320308f18436e02e4fc6619118f0d29093d20885f926b6f3f086ad5343ca81d23fd29c756962cd1379ecb753a0c500e",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/echo.tryton.geeraert.eu.conf",
"id": "7735c984b3094199e43e74f357351ca36603c4ce",
"id": "de236efcfe8e5cb2e69b31449c6f5d81bff483b7",
"sensitive_content": null,
"source": null
},
@@ -127,18 +127,18 @@
"index_key": "gitlab",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitlab_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n client_max_body_size 20m;\n proxy_request_buffering off;\n\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "sT5vYEBbmFziHCaFf+mfDaiOvltKstq3PMiRANqE7r8=",
"content_base64sha512": "y5wZRe8rvNxsC12A5YTsgetRsfeRpPvHAJVeX8sGv/JaaKyQ71/QCzQFioy3XjrzDDQ9M0gddiynZO0prEXChA==",
"content_md5": "5945eee1121d2d4233b57f9c647c3e7c",
"content_sha1": "08ee022298bd09c8b48f5abbfc8fb3652728c967",
"content_sha256": "b13e6f60405b985ce21c26857fe99f0da88ebe5b4ab2dab73cc89100da84eebf",
"content_sha512": "cb9c1945ef2bbcdc6c0b5d80e584ec81eb51b1f791a4fbc700955e5fcb06bff25a68ac90ef5fd00b34058a8cb75e3af30c343d33481d762ca764ed29ac45c284",
"content_base64sha256": "N/Vug3Oop20m9/ICeYJ6/x/chY3XjUlhWgn7t9jP2/M=",
"content_base64sha512": "RHfM7R8ZeNiyuzYTganyOn5DyYW/JoshtONNfW5SC+i+MY02bVvXIkAoXlcPDMmYYkHlJ1q+C3MsmFyibG500w==",
"content_md5": "d9fb48351128393eedfef68ba99eba30",
"content_sha1": "850e27a643e0c3f48fa2fcd27856cb6f2571fd93",
"content_sha256": "37f56e8373a8a76d26f7f20279827aff1fdc858dd78d49615a09fbb7d8cfdbf3",
"content_sha512": "4477cced1f1978d8b2bb361381a9f23a7e43c985bf268b21b4e34d7d6e520be8be318d366d5bd72240285e570f0cc9986241e5275abe0b732c985ca26c6e74d3",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/gitlab.tryton.geeraert.eu.conf",
"id": "08ee022298bd09c8b48f5abbfc8fb3652728c967",
"id": "850e27a643e0c3f48fa2fcd27856cb6f2571fd93",
"sensitive_content": null,
"source": null
},
@@ -155,18 +155,18 @@
"index_key": "keycloak",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n \n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n \n\n\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "vMjUSlJ4sOt9OjvUk9swHCnclYlT5JkBDFI7uxKFksg=",
"content_base64sha512": "7ej/8qY1Iib7KUN7Y7ccRzX0DdqZgf5PzTqk7eaAjIx7jjJ6GkohETcoPEeoqccHyhsYeusBpckrWn7HaoT4TQ==",
"content_md5": "9e976349fe8b513ccab4a37263fff3b2",
"content_sha1": "d63c4468f16a1a854e04bc24fab60d08e61988de",
"content_sha256": "bcc8d44a5278b0eb7d3a3bd493db301c29dc958953e499010c523bbb128592c8",
"content_sha512": "ede8fff2a6352226fb29437b63b71c4735f40dda9981fe4fcd3aa4ede6808c8c7b8e327a1a4a211137283c47a8a9c707ca1b187aeb01a5c92b5a7ec76a84f84d",
"content_base64sha256": "UHQ7kLIOKcsrZtyUF7945TH1hCoZROX1yY4fb1tJjdY=",
"content_base64sha512": "W7ubrC73Q0kDBDChkMkUq3eIL6bk2KP2Va7DwY4MlsdSJkB5t+Zjlq4KVqKAcNXi3xpkmE3DY1RXsVIjDA0yKg==",
"content_md5": "ee110e6ec86def55c44023774c8ea9eb",
"content_sha1": "1ba4e7057a8f8641ff1e7b2d7c3dc41d5e6f749d",
"content_sha256": "50743b90b20e29cb2b66dc9417bf78e531f5842a1944e5f5c98e1f6f5b498dd6",
"content_sha512": "5bbb9bac2ef74349030430a190c914ab77882fa6e4d8a3f655aec3c18e0c96c752264079b7e66396ae0a56a28070d5e2df1a64984dc3635457b152230c0d322a",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/keycloak.tryton.geeraert.eu.conf",
"id": "d63c4468f16a1a854e04bc24fab60d08e61988de",
"id": "1ba4e7057a8f8641ff1e7b2d7c3dc41d5e6f749d",
"sensitive_content": null,
"source": null
},
@@ -183,18 +183,18 @@
"index_key": "nextcloud",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n \n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "bYH6+PkvYOS+Dv+d3rimq14gkFybnmQd2GqdJCbU5Zc=",
"content_base64sha512": "PjQFc3QIJZSpxIkJjjPJBYPx9I2qT1VAdhZYFYhuq6rXMBFBgLLIRlynp9bPR0JU564H4sT9Gdfa0K6IhOYCbg==",
"content_md5": "9dceef0d6bbbd36c41c200fe5afefd1e",
"content_sha1": "e136bd3d9fc0b1208ac49d15eb56887d55c51a10",
"content_sha256": "6d81faf8f92f60e4be0eff9ddeb8a6ab5e20905c9b9e641dd86a9d2426d4e597",
"content_sha512": "3e34057374082594a9c489098e33c90583f1f48daa4f554076165815886eabaad730114180b2c8465ca7a7d6cf474254e7ae07e2c4fd19d7dad0ae8884e6026e",
"content_base64sha256": "4t+YENqsJPHe/4+B3zMQZntzGmd7kUmkhtkl3NyTM20=",
"content_base64sha512": "M3fSSr1sD0gGm80dpkk3lIMwUxIMBqYA65rnaTrdgpWxz06vny7KHQ0Zk+HJPb1NC8DU8WjCENAnCUcKF51tWw==",
"content_md5": "1b590a6df719896e97522071fe9d4924",
"content_sha1": "599f0c6e27f4f23f1ed88bbcf30f5280831a445b",
"content_sha256": "e2df9810daac24f1deff8f81df3310667b731a677b9149a486d925dcdc93336d",
"content_sha512": "3377d24abd6c0f48069bcd1da6493794833053120c06a600eb9ae7693add8295b1cf4eaf9f2eca1d0d1993e1c93dbd4d0bc0d4f168c210d02709470a179d6d5b",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/nextcloud.tryton.geeraert.eu.conf",
"id": "e136bd3d9fc0b1208ac49d15eb56887d55c51a10",
"id": "599f0c6e27f4f23f1ed88bbcf30f5280831a445b",
"sensitive_content": null,
"source": null
},
@@ -211,18 +211,18 @@
"index_key": "sonarr",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "A6ElmqlK5iz/RYdJ/AUwPhjtSrw+V2TMi7gS4fCLPTI=",
"content_base64sha512": "vdB+UAwb4ZQEWHJp0QFo8RHjdAmrxrhyDhZMlLbanI7WHZwpwNbkkqSD6k0lzjBeviWdwQ8kJ508nNjt1vSXig==",
"content_md5": "5626714858f4af5f2cba1d314804b819",
"content_sha1": "bb789b145b467d0b4f6a2bc0e3ddc3c2ac048946",
"content_sha256": "03a1259aa94ae62cff458749fc05303e18ed4abc3e5764cc8bb812e1f08b3d32",
"content_sha512": "bdd07e500c1be19404587269d10168f111e37409abc6b8720e164c94b6da9c8ed61d9c29c0d6e492a483ea4d25ce305ebe259dc10f24279d3c9cd8edd6f4978a",
"content_base64sha256": "wFVC3EDDEnh78WdSFy2rY66ztZiHStRR4exbuxvVzOI=",
"content_base64sha512": "HOyoR3ON0QGutDBz6AicVs/udVi1HCp0GWc/lb2L7iueOF5Afa3+3Fm4cpSB1HZYWZAu+by+0L2kCLczbQw3fA==",
"content_md5": "959dcb7c11510dd03c1a6ac8922becb3",
"content_sha1": "58691959f5b23d94a28bf6ef4ba3ee09f8619da6",
"content_sha256": "c05542dc40c312787bf16752172dab63aeb3b598874ad451e1ec5bbb1bd5cce2",
"content_sha512": "1ceca847738dd101aeb43073e8089c56cfee7558b51c2a7419673f95bd8bee2b9e385e407dadfedc59b8729481d4765859902ef9bcbed0bda408b7336d0c377c",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/sonarr.tryton.geeraert.eu.conf",
"id": "bb789b145b467d0b4f6a2bc0e3ddc3c2ac048946",
"id": "58691959f5b23d94a28bf6ef4ba3ee09f8619da6",
"sensitive_content": null,
"source": null
},
terraform/terraform.tfstate.backup
+65 -65
View File
@@ -1,7 +1,7 @@
{
"version": 4,
"terraform_version": "1.9.2",
"serial": 33,
"serial": 227,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": {},
"resources": [
@@ -15,18 +15,18 @@
"index_key": "bitwarden",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "YTpqmEfgRp8OS3TZMNy7SLoTCt3UYNTchR3OITgkjm8=",
"content_base64sha512": "OvZDSCJ9qtm67k7gQt+uTV/NDVtneL3vunKndKspzAk/wPJxqmthkzrv/HQ5l5ptm17YmqGOdkTK6bgkLW+y3w==",
"content_md5": "befd5d886b1d10376671904baac6be2e",
"content_sha1": "5c35d44470c4be38a4513c4211f40cd6e76d5705",
"content_sha256": "613a6a9847e0469f0e4b74d930dcbb48ba130addd460d4dc851dce2138248e6f",
"content_sha512": "3af64348227daad9baee4ee042dfae4d5fcd0d5b6778bdefba72a774ab29cc093fc0f271aa6b61933aeffc7439979a6d9b5ed89aa18e7644cae9b8242d6fb2df",
"content_base64sha256": "MiHDPlxHGVzvr8FZTUvk8du6fgMi5XPAEGX5dZsiNPM=",
"content_base64sha512": "YEfT6PCNp1W67sYhWvVqiSeT6f1CoNyMELFWSuhbEmd/TKWM7yUN6bv2btg9/9fNys+TSR2gwVPyVYkQ+lhIUw==",
"content_md5": "81e123c4be15ae3c3dfade15cc7f0514",
"content_sha1": "d390acbf0d02c5e29658cfb2b078fc123e09f821",
"content_sha256": "3221c33e5c47195cefafc1594d4be4f1dbba7e0322e573c01065f9759b2234f3",
"content_sha512": "6047d3e8f08da755baeec6215af56a892793e9fd42a0dc8c10b1564ae85b12677f4ca58cef250de9bbf66ed83dffd7cdcacf93491da0c153f2558910fa584853",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bitwarden.tryton.geeraert.eu.conf",
"id": "5c35d44470c4be38a4513c4211f40cd6e76d5705",
"id": "d390acbf0d02c5e29658cfb2b078fc123e09f821",
"sensitive_content": null,
"source": null
},
@@ -43,18 +43,18 @@
"index_key": "bookstack",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "OXSKkaAcbeozovKy/9nhsyLxfunVe6p3OZz0y+XnFv4=",
"content_base64sha512": "YGVEVKPjCgEqt8hA1k7BX9EyCdYzwtSrQ3v9/Pit63CYm1ip3ChlcOTVwFEg4vl+K+A2sYyAfgOQhglJLDWGCg==",
"content_md5": "f66b1e1c42e4f61b264079cb06117713",
"content_sha1": "d6b587bfdd8fd65d1c167c554274964a73c97308",
"content_sha256": "39748a91a01c6dea33a2f2b2ffd9e1b322f17ee9d57baa77399cf4cbe5e716fe",
"content_sha512": "60654454a3e30a012ab7c840d64ec15fd13209d633c2d4ab437bfdfcf8adeb70989b58a9dc286570e4d5c05120e2f97e2be036b18c807e03908609492c35860a",
"content_base64sha256": "urzNcqSqLBKi0eHnlSq9xIMwmU0f4sBTXaFDbj/PmTc=",
"content_base64sha512": "3Aw+n9/OZZNT3BTEUyRJaPFN158evN8rRJPJN1n+mJBVgGnlAhzFCB1UD+Uq/D5wmalEiDEcDyj+3K0A6nsxNw==",
"content_md5": "1f14b6c64301c3fb014258ca423e5d44",
"content_sha1": "45c72d585c88b10777c567f7516dc03ed5ece3f5",
"content_sha256": "babccd72a4aa2c12a2d1e1e7952abdc48330994d1fe2c0535da1436e3fcf9937",
"content_sha512": "dc0c3e9fdfce659353dc14c453244968f14dd79f1ebcdf2b4493c93759fe9890558069e5021cc5081d540fe52afc3e7099a94488311c0f28fedcad00ea7b3137",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/bookstack.tryton.geeraert.eu.conf",
"id": "d6b587bfdd8fd65d1c167c554274964a73c97308",
"id": "45c72d585c88b10777c567f7516dc03ed5ece3f5",
"sensitive_content": null,
"source": null
},
@@ -71,18 +71,18 @@
"index_key": "django",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "JgtzbX0/Lbqprbplt5uLgJIxYOT6UujNXJVeucEvd6k=",
"content_base64sha512": "5CfWA5fW94lfWqGLG6B+PiLi86eSd6qDyCe0oD4T7MfAhgbpTqpLAEuEUm3r8zMUjka/qGKukekKrsjDFadIxw==",
"content_md5": "0adb199fdbe99b316319c99adfa5e161",
"content_sha1": "10fb8bff769effeb34701187825fff1636b1b3b3",
"content_sha256": "260b736d7d3f2dbaa9adba65b79b8b80923160e4fa52e8cd5c955eb9c12f77a9",
"content_sha512": "e427d60397d6f7895f5aa18b1ba07e3e22e2f3a79277aa83c827b4a03e13ecc7c08606e94eaa4b004b84526debf333148e46bfa862ae91e90aaec8c315a748c7",
"content_base64sha256": "G0+lIbHzq0HLNQKkoxvJaWs3byjSIOnQxcv2SbDM1wU=",
"content_base64sha512": "RV3xxzLaD23UvfJkh4/1fCB0V696nGSiT94tCQhVQSnTnNMGYnuivQjYiLu6Pw9YbpWK5XG0WYwv0vRmhPE+7A==",
"content_md5": "244193e3cb28880614c1ca8cab4a3e70",
"content_sha1": "2b1b9ae48437555e29b661a44c7c2be3fb426c27",
"content_sha256": "1b4fa521b1f3ab41cb3502a4a31bc9696b376f28d220e9d0c5cbf649b0ccd705",
"content_sha512": "455df1c732da0f6dd4bdf264878ff57c207457af7a9c64a24fde2d0908554129d39cd306627ba2bd08d888bbba3f0f586e958ae571b4598c2fd2f46684f13eec",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/django.tryton.geeraert.eu.conf",
"id": "10fb8bff769effeb34701187825fff1636b1b3b3",
"id": "2b1b9ae48437555e29b661a44c7c2be3fb426c27",
"sensitive_content": null,
"source": null
},
@@ -99,18 +99,18 @@
"index_key": "echo",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "2JB/AZrF5sgi2qN2GV/An7UaQ43+BkANXGsqWoXDnvM=",
"content_base64sha512": "y4xsUka1eLho4KEjbII9KEGpc5sWwm6FoWU1SKXL02HbuJDW6p2WDQwVyaXHm0Oo7Bo1zG25Clf0NO+Xyehn2Q==",
"content_md5": "d5282cd5b3b1751d3e5d7e177852479c",
"content_sha1": "7735c984b3094199e43e74f357351ca36603c4ce",
"content_sha256": "d8907f019ac5e6c822daa376195fc09fb51a438dfe06400d5c6b2a5a85c39ef3",
"content_sha512": "cb8c6c5246b578b868e0a1236c823d2841a9739b16c26e85a1653548a5cbd361dbb890d6ea9d960d0c15c9a5c79b43a8ec1a35cc6db90a57f434ef97c9e867d9",
"content_base64sha256": "3QkycNqzv6TJ/gLM8FHnCYOJ4kaF+2SlZB1ndpqppa4=",
"content_base64sha512": "eky5CjdfBdtm14lZslFWyqg6NzSZ5r3Hs4OK//JlK+sST/j82bgytt+rilNi6dBe2Tw5+UsuDA6TtjNk95qfKw==",
"content_md5": "42a45c7f53bc9ae13e903de204fa8ff0",
"content_sha1": "2b3b100424ab1866e9597c1ea9fbc44d2b32ee67",
"content_sha256": "dd093270dab3bfa4c9fe02ccf051e7098389e24685fb64a5641d67769aa9a5ae",
"content_sha512": "7a4cb90a375f05db66d78959b25156caa83a373499e6bdc7b3838afff2652beb124ff8fcd9b832b6dfab8a5362e9d05ed93c39f94b2e0c0e93b63364f79a9f2b",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/echo.tryton.geeraert.eu.conf",
"id": "7735c984b3094199e43e74f357351ca36603c4ce",
"id": "2b3b100424ab1866e9597c1ea9fbc44d2b32ee67",
"sensitive_content": null,
"source": null
},
@@ -127,18 +127,18 @@
"index_key": "gitlab",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitlab_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n client_max_body_size 20m;\n proxy_request_buffering off;\n\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "O4CcdoDvlGq11cnnlPTRC8TIuhEfn6gLuHy/T292DXg=",
"content_base64sha512": "gNKOmGlLYfQYkZ9dSvZw7uAvD5bJcrZ3lIXETfOycg1bfkLZtP46EzPOoClCXHCwgqLcioThKj7AKAJwBMAUQA==",
"content_md5": "4a178aabb7b684430fbdd33b5b557a01",
"content_sha1": "5a67da7030bf7d54c3667b56f81b587a232c7e5d",
"content_sha256": "3b809c7680ef946ab5d5c9e794f4d10bc4c8ba111f9fa80bb87cbf4f6f760d78",
"content_sha512": "80d28e98694b61f418919f5d4af670eee02f0f96c972b6779485c44df3b2720d5b7e42d9b4fe3a1333cea029425c70b082a2dc8a84e12a3ec028027004c01440",
"content_base64sha256": "Yg5Q1OgAoCGr9jtol6cNdhP7x12nzBosJ6u7hp+kw9A=",
"content_base64sha512": "eZcu+kGxo8KsH1XcSS1rdLEiyxnJL4tzA+8cvipUzjOT2Jen2ugtBE+nqWUtwxBcP176znvpVFGoy4kBnoPSzw==",
"content_md5": "fa125ab7b89e4f43663be6561acf24ec",
"content_sha1": "ee9cd14ea17ca1316250ec16eede425158abb453",
"content_sha256": "620e50d4e800a021abf63b6897a70d7613fbc75da7cc1a2c27abbb869fa4c3d0",
"content_sha512": "79972efa41b1a3c2ac1f55dc492d6b74b122cb19c92f8b7303ef1cbe2a54ce3393d897a7dae82d044fa7a9652dc3105c3f5eface7be95451a8cb89019e83d2cf",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/gitlab.tryton.geeraert.eu.conf",
"id": "5a67da7030bf7d54c3667b56f81b587a232c7e5d",
"id": "ee9cd14ea17ca1316250ec16eede425158abb453",
"sensitive_content": null,
"source": null
},
@@ -155,18 +155,18 @@
"index_key": "keycloak",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n \n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n \n\n\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for keycloak\n############################################\n\nupstream keycloak_backend {\n server keycloak.keycloak.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;\n location / {\n proxy_pass http://keycloak_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\t\n set_real_ip_from 0.0.0.0/0;\n real_ip_header X-Real-IP;\n real_ip_recursive on;\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = keycloak.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "vMjUSlJ4sOt9OjvUk9swHCnclYlT5JkBDFI7uxKFksg=",
"content_base64sha512": "7ej/8qY1Iib7KUN7Y7ccRzX0DdqZgf5PzTqk7eaAjIx7jjJ6GkohETcoPEeoqccHyhsYeusBpckrWn7HaoT4TQ==",
"content_md5": "9e976349fe8b513ccab4a37263fff3b2",
"content_sha1": "d63c4468f16a1a854e04bc24fab60d08e61988de",
"content_sha256": "bcc8d44a5278b0eb7d3a3bd493db301c29dc958953e499010c523bbb128592c8",
"content_sha512": "ede8fff2a6352226fb29437b63b71c4735f40dda9981fe4fcd3aa4ede6808c8c7b8e327a1a4a211137283c47a8a9c707ca1b187aeb01a5c92b5a7ec76a84f84d",
"content_base64sha256": "C9ncNPhDpmhIg3cqfCGbRGQrLA8GiOzkn/28lVhNruk=",
"content_base64sha512": "QpJ6nxvIBfooa8km+URzuNcZMgq5/7pKxd3dnlRlOs7scNuHzRAJaV9Jfl9XDTmDGWR2l9N8qecc0G2HbWnJXA==",
"content_md5": "5f2d3f68bf54b78ca6ca7064ff7cd36a",
"content_sha1": "aa739ee51ae97e619b16659de7621da9d47a18e5",
"content_sha256": "0bd9dc34f843a6684883772a7c219b44642b2c0f0688ece49ffdbc95584daee9",
"content_sha512": "42927a9f1bc805fa286bc926f94473b8d719320ab9ffba4ac5dddd9e54653aceec70db87cd1009695f497e5f570d398319647697d37ca9e71cd06d876d69c95c",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/keycloak.tryton.geeraert.eu.conf",
"id": "d63c4468f16a1a854e04bc24fab60d08e61988de",
"id": "aa739ee51ae97e619b16659de7621da9d47a18e5",
"sensitive_content": null,
"source": null
},
@@ -183,18 +183,18 @@
"index_key": "nextcloud",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n \n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "bYH6+PkvYOS+Dv+d3rimq14gkFybnmQd2GqdJCbU5Zc=",
"content_base64sha512": "PjQFc3QIJZSpxIkJjjPJBYPx9I2qT1VAdhZYFYhuq6rXMBFBgLLIRlynp9bPR0JU564H4sT9Gdfa0K6IhOYCbg==",
"content_md5": "9dceef0d6bbbd36c41c200fe5afefd1e",
"content_sha1": "e136bd3d9fc0b1208ac49d15eb56887d55c51a10",
"content_sha256": "6d81faf8f92f60e4be0eff9ddeb8a6ab5e20905c9b9e641dd86a9d2426d4e597",
"content_sha512": "3e34057374082594a9c489098e33c90583f1f48daa4f554076165815886eabaad730114180b2c8465ca7a7d6cf474254e7ae07e2c4fd19d7dad0ae8884e6026e",
"content_base64sha256": "Wuh7w2VWja7APrAI+S7GO/IXNoUzZ4e9wzFbAZ5Ppts=",
"content_base64sha512": "8P6Im51F8nDVM/ia7TlznoRL85rf2VsXCgT+gUjNGlFPq77x7lVQnNLa0dGRzNBRTxiyHm/iH7LEeJHpFxWfcQ==",
"content_md5": "e3770a49a60296c2a67bfd5de70fa1b6",
"content_sha1": "d0224436372caefd1d60881cf282cda3e2c0a9c2",
"content_sha256": "5ae87bc365568daec03eb008f92ec63bf2173685336787bdc3315b019e4fa6db",
"content_sha512": "f0fe889b9d45f270d533f89aed39739e844bf39adfd95b170a04fe8148cd1a514fabbef1ee55509cd2dad1d191ccd0514f18b21e6fe21fb2c47891e917159f71",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/nextcloud.tryton.geeraert.eu.conf",
"id": "e136bd3d9fc0b1208ac49d15eb56887d55c51a10",
"id": "d0224436372caefd1d60881cf282cda3e2c0a9c2",
"sensitive_content": null,
"source": null
},
@@ -211,18 +211,18 @@
"index_key": "sonarr",
"schema_version": 0,
"attributes": {
"content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\t\n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n",
"content_base64": null,
"content_base64sha256": "A6ElmqlK5iz/RYdJ/AUwPhjtSrw+V2TMi7gS4fCLPTI=",
"content_base64sha512": "vdB+UAwb4ZQEWHJp0QFo8RHjdAmrxrhyDhZMlLbanI7WHZwpwNbkkqSD6k0lzjBeviWdwQ8kJ508nNjt1vSXig==",
"content_md5": "5626714858f4af5f2cba1d314804b819",
"content_sha1": "bb789b145b467d0b4f6a2bc0e3ddc3c2ac048946",
"content_sha256": "03a1259aa94ae62cff458749fc05303e18ed4abc3e5764cc8bb812e1f08b3d32",
"content_sha512": "bdd07e500c1be19404587269d10168f111e37409abc6b8720e164c94b6da9c8ed61d9c29c0d6e492a483ea4d25ce305ebe259dc10f24279d3c9cd8edd6f4978a",
"content_base64sha256": "mp3AObi9eXjcUlCXGqwSTLBuyzIgESMoPatl7YzY0uM=",
"content_base64sha512": "pcKbU6H2METIsmx2WMr0GjHF35s6zX6BtMaYLNwFYL2x+JjWIoWuJh/XJEozSnN+EdQnYuLG9VisYnZRtyJwdw==",
"content_md5": "b050dc3f5273d7d59a89d1aef51b9f6c",
"content_sha1": "02cdb271fc2a79c9a8d4363fe1fed714fb55fb1a",
"content_sha256": "9a9dc039b8bd7978dc5250971aac124cb06ecb32201123283dab65ed8cd8d2e3",
"content_sha512": "a5c29b53a1f63044c8b26c7658caf41a31c5df9b3acd7e81b4c6982cdc0560bdb1f898d62285ae261fd7244a334a737e11d42762e2c6f558ac627651b7227077",
"directory_permission": "0777",
"file_permission": "0777",
"filename": "../conf.d/sonarr.tryton.geeraert.eu.conf",
"id": "bb789b145b467d0b4f6a2bc0e3ddc3c2ac048946",
"id": "02cdb271fc2a79c9a8d4363fe1fed714fb55fb1a",
"sensitive_content": null,
"source": null
},
terraform/variables.auto.tfvars
+12 -9
View File
@@ -5,6 +5,7 @@ nginx_sites = {
extra_value_bool = false
extra-value = false
http2_bool = true
proxy_pass_https = false
}
bookstack = {
@@ -13,6 +14,8 @@ nginx_sites = {
extra_value_bool = false
extra-value = false
http2_bool = false
proxy_pass_https = false
}
django = {
service = "webserver.django-python.svc:8000"
@@ -20,6 +23,7 @@ nginx_sites = {
extra_value_bool = false
extra-value = false
http2_bool = true
proxy_pass_https = false
}
echo = {
service = "echo-server.echo-server.svc:80"
@@ -27,17 +31,18 @@ nginx_sites = {
extra_value_bool = false
extra-value = false
http2_bool = true
proxy_pass_https = false
}
gitlab = {
service = "webserver.gitlab.svc:443"
proxy_cache = true
extra_value_bool = true
extra-value = <<EOT
client_max_body_size 20m;
proxy_request_buffering off;
EOT
client_max_body_size 20m;
proxy_request_buffering off;
EOT
http2_bool = true
proxy_pass_https = true
}
sonarr = {
service = "sonarr.servarr.svc"
@@ -46,6 +51,7 @@ EOT
http2_bool = false
extra-value = <<EOT
EOT
proxy_pass_https = false
}
@@ -60,8 +66,7 @@ EOT
real_ip_header X-Real-IP;
real_ip_recursive on;
EOT
proxy_pass_https = false
}
nextcloud = {
@@ -85,9 +90,7 @@ EOT
return 200 "<!DOCTYPE html><h2>health check</h2>\n";
}
EOT
proxy_pass_https = false
}
}