enable another field text inside the location block

terraform/module.tf

@@ -8,6 +8,7 @@ variable "nginx_sites" {
     enabled                 = optional(bool, true)
     proxy_cache             = optional(bool, false)
     extra-value             = optional(string, "")
+    extra-value-location    = optional(string, "")
     http2_bool              = optional(bool, false)
     proxy_pass_https        = optional(bool, false)
     authentication_required = optional(bool, false)
@@ -23,6 +24,7 @@ resource "local_file" "nginx" {
     name_service            = each.value.service
     proxy_cache             = each.value.proxy_cache
     extra-value             = each.value.extra-value
+    extra-value-location             = each.value.extra-value-location
     http2_bool              = each.value.http2_bool
     proxy_pass_https        = each.value.proxy_pass_https
     authentication_required = each.value.authentication_required
@@ -79,6 +81,7 @@ resource "kubernetes_config_map" "automatic-configmap" {
       name_service            = value.service
       proxy_cache             = value.proxy_cache
       extra-value             = value.extra-value
+      extra-value-location    = value.extra-value-location
       http2_bool              = value.http2_bool
       proxy_pass_https        = value.proxy_pass_https
       authentication_required = value.authentication_required

terraform/nginx_config.tftpl

@@ -13,6 +13,7 @@ server {
                 proxy_pass %{ if proxy_pass_https}https%{else}http%{ endif }://${name_site}_backend;
                 proxy_set_header    Upgrade     $http_upgrade;
 		proxy_set_header Host $host;
+                ${extra-value-location}
 		%{ if authentication_required}
                 auth_basic "Administrator’s Area";
                 auth_basic_user_file /authentication-htpasswd/.htpasswd;

terraform/variables.auto.tfvars

@@ -5,9 +5,11 @@ nginx_sites = {
   }
 
   bookstack = {
-    service     = "webserver.bookstack.svc"
+    #    service     = "webserver.bookstack.svc"
+    service     = "bookstack-svc.bookstack.svc"
     proxy_cache = false
   }
+
   django = {
     service     = "webserver.django-python.svc:8000"
     proxy_cache = true
@@ -35,6 +37,7 @@ client_max_body_size 20m;
 
   keycloak = {
     service     = "keycloak.keycloak.svc:8080"
+    enabled     = false
     extra-value = <<EOT
 
         set_real_ip_from 0.0.0.0/0;
@@ -43,7 +46,8 @@ client_max_body_size 20m;
                         EOT
   }
   nextcloud = {
-    service     = "webserver.nextcloud.svc"
+    service = "webserver.nextcloud.svc"
+    #    service     = "next-svc.next.svc"
     proxy_cache = true
     http2_bool  = true
     extra-value = <<EOT
@@ -65,6 +69,7 @@ client_max_body_size 20m;
   }
 
 
+
   router = {
     service                 = "192.168.88.1"
     authentication_required = true
@@ -76,7 +81,7 @@ client_max_body_size 20m;
     service = "192.168.1.28:5000"
   }
   onitama = {
-    service = "onitama.onitama.svc"
+    service = "onitama-svc.onitama.svc:8080"
     enabled = false
   }
 
@@ -123,7 +128,9 @@ client_max_body_size 20m;
     enabled = false
   }
   unifi = {
-    service = "192.168.88.52:31043"
+    #    service = "unifi.unifi.svc:8443"
+    service          = "192.168.88.244:8443"
+    proxy_pass_https = true
   }
   unifi-inform = {
     service = "192.168.88.50:8082"
@@ -142,9 +149,12 @@ client_max_body_size 20m;
   }
   screeps = {
     enabled = false
-    service = "screeps.screeps.svc:21025"
+    service = "screeps-svc.screeps.svc:443"
+  }
+  stirling = {
+    enabled = false
+    service = "stirling-svc.stirling.svc:8080"
   }
-
   vulcan = {
     service = "vulcan.vulcan.svc:80"
     enabled = false
@@ -159,7 +169,8 @@ client_max_body_size 20m;
     service = "nginx-svc.nginx.svc"
   }
   openmediavault = {
-    service = "192.168.88.42"
+    service = "192.168.88.29"
+    #    service = "192.168.88.42"
   }
   pihole = {
     service = "web.piholenew.svc"
@@ -173,11 +184,91 @@ client_max_body_size 20m;
   }
   synology = {
     enabled = true
-    service = "192.168.88.39:5001"
+    service = "192.168.88.39:5000"
   }
 
   gitea = {
     enabled = true
     service = "webserver.gitea.svc:3000"
   }
+
+  spider = {
+    enabled = false
+    service = "spider-svc.spider.svc:8080"
+  }
+  nextcloud-terraform = {
+    enabled = false
+    service = "nextcloud-web-svc.nextcloud-terraform.svc:80"
+
+  }
+  paper = {
+    enabled = false
+    service = "paper-svc.paper.svc:8000"
+
+  }
+  next = {
+    enabled     = false
+    service     = "next-svc.next.svc"
+    proxy_cache = true
+    http2_bool  = true
+    extra-value = <<EOT
+
+
+        location /.well-known/carddav {
+                return 301 $scheme://$host/remote.php/dav;
+        }
+
+        location /.well-known/caldav {
+                return 301 $scheme://$host/remote.php/dav;
+        }
+
+        location = /health {
+                default_type text/html;
+                return 200 "<!DOCTYPE html><h2>health check</h2>\n";
+        }
+                        EOT
+  }
+
+  bookstack-terraform = {
+    enabled = false
+    service = "bookstack-svc.bookstack-terraform.svc"
+  }
+  stash = {
+    enabled     = false
+    service     = "stash-svc.stash.svc:9999"
+    extra-value = <<EOT
+
+proxy_set_header Range $http_range;
+        proxy_set_header If-Range $http_if_range;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+        #Next three lines allow websockets
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        
+        #Next lines added from Stash documentation
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 60000s;
+        proxy_set_header Host $http_host;
+
+                EOT
+
+  }
+  neko = {
+            enabled = false
+    service              = "neko-svc.neko.svc:8080"
+    http2_bool  = true
+    extra-value-location = <<EOT
+proxy_set_header Connection "upgrade";
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_cache_bypass $http_upgrade;
+
+                EOT
+
+  }
+
+
 }