pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

switching to volumes for ssl certs

Browse Source
This commit is contained in:
pi-ux-ce
2026-08-11 15:03:31 +01:00
parent b3a780b882
commit 1bda70bd8b
6 changed files with 67 additions and 67 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Nginx.kube.yaml
+5 -5
View File
@@ -51,10 +51,10 @@ spec:
mountPath: /etc/nginx/geoip.d/ mountPath: /etc/nginx/geoip.d/
- name: blacklisted-memory-volume - name: blacklisted-memory-volume
mountPath: /etc/nginx/blacklisted.memory.d/ mountPath: /etc/nginx/blacklisted.memory.d/
- name: reverse-proxy-ssl - name: reverse-proxy-ssl
mountPath: /etc/nginx/ssl/ mountPath: /etc/nginx/ssl/
- name: reverse-proxy-ssl-root
mountPath: /etc/nginx/sslroot/
- mountPath: /etc/nginx/ - mountPath: /etc/nginx/
name: nginx-configfile name: nginx-configfile
- name: proxy-cache-path-volume - name: proxy-cache-path-volume
@@ -108,10 +108,10 @@ spec:
- name: reverse-proxy-log - name: reverse-proxy-log
persistentVolumeClaim: persistentVolumeClaim:
claimName: reverse-proxy-log claimName: reverse-proxy-log
# - name: reverse-proxy-ssl
# hostPath:
# path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
- name: reverse-proxy-ssl - name: reverse-proxy-ssl
hostPath:
path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
- name: reverse-proxy-ssl-root
persistentVolumeClaim: persistentVolumeClaim:
claimName: reverse-proxy-ssl claimName: reverse-proxy-ssl
- name: nginx-configfile - name: nginx-configfile
nginx-config.configmap.yaml
+2 -2
View File
@@ -22,8 +22,8 @@ data:
blocked_fmt '$http_host \\t $remote_addr - [$time_local] '\n\t\t'Blocked Country: blocked_fmt '$http_host \\t $remote_addr - [$time_local] '\n\t\t'Blocked Country:
$geoip2_data_country_iso_code '\n '\"$request\" $status';\n\n\tlog_format $geoip2_data_country_iso_code '\n '\"$request\" $status';\n\n\tlog_format
deny_style 'deny $remote_addr; #$geoip2_data_city_name $geoip2_data_country_name';\n\n\tserver deny_style 'deny $remote_addr; #$geoip2_data_city_name $geoip2_data_country_name';\n\n\tserver
{\n\tlisten 80;\n listen 443 default ssl;\n\tssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; {\n\tlisten 80;\n listen 443 default ssl;\n\tssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;
# managed by$\n ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; # managed by$\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;
# managed $\n location / {\n proxy_pass http://1.1.1.1;\n # managed $\n location / {\n proxy_pass http://1.1.1.1;\n
\ proxy_redirect off;\n proxy_set_header Host $host;\n \ proxy_redirect off;\n proxy_set_header Host $host;\n
\ proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header \ proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header
nginx.conf
+2 -2
View File
@@ -41,8 +41,8 @@ http {
server { server {
listen 80; listen 80;
listen 443 default ssl; listen 443 default ssl;
ssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; # managed by$ ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem; # managed by$
ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; # managed $ ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem; # managed $
location / { location / {
proxy_pass http://1.1.1.1; proxy_pass http://1.1.1.1;
proxy_redirect off; proxy_redirect off;
terraform/nginx_config.tftpl
+2 -2
View File
@@ -163,8 +163,8 @@ server {
listen 80; listen 80;
%{~ endif ~} %{~ endif ~}
ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;
terraform/terraform.tfstate
+28 -28
View File
File diff suppressed because one or more lines are too long
terraform/terraform.tfstate.backup
+28 -28
View File
File diff suppressed because one or more lines are too long