enable disabling https redirection and allowing port 80

This commit is contained in:
2025-04-23 10:21:39 +01:00
parent e45b2e703b
commit 706673a4a3
2 changed files with 18 additions and 5 deletions
+7
View File
@@ -12,6 +12,9 @@ variable "nginx_sites" {
http2_bool = optional(bool, false) http2_bool = optional(bool, false)
proxy_pass_https = optional(bool, false) proxy_pass_https = optional(bool, false)
authentication_required = optional(bool, false) authentication_required = optional(bool, false)
redirect_to_https_bool = optional(bool, true)
listen_port_80_bool = optional(bool, false)
})) }))
} }
@@ -28,6 +31,8 @@ resource "local_file" "nginx" {
http2_bool = each.value.http2_bool http2_bool = each.value.http2_bool
proxy_pass_https = each.value.proxy_pass_https proxy_pass_https = each.value.proxy_pass_https
authentication_required = each.value.authentication_required authentication_required = each.value.authentication_required
redirect_to_https_bool = each.value.redirect_to_https_bool
listen_port_80_bool = each.value.listen_port_80_bool
}) })
filename = "../conf.d/${each.key}.tryton.geeraert.eu.conf" filename = "../conf.d/${each.key}.tryton.geeraert.eu.conf"
@@ -85,6 +90,8 @@ resource "kubernetes_config_map" "automatic-configmap" {
http2_bool = value.http2_bool http2_bool = value.http2_bool
proxy_pass_https = value.proxy_pass_https proxy_pass_https = value.proxy_pass_https
authentication_required = value.authentication_required authentication_required = value.authentication_required
redirect_to_https_bool = value.redirect_to_https_bool
listen_port_80_bool = value.listen_port_80_bool
}) if value.enabled == true }) if value.enabled == true
} }
+10 -4
View File
@@ -92,6 +92,7 @@ client_max_body_size 20m;
enabled = false enabled = false
} }
paperless-docker = { paperless-docker = {
enabled = false
service = "192.168.88.50:4887" service = "192.168.88.50:4887"
} }
paperless = { paperless = {
@@ -149,8 +150,10 @@ client_max_body_size 20m;
service = "netdata-agent.netdata.svc:19999" service = "netdata-agent.netdata.svc:19999"
} }
screeps = { screeps = {
enabled = false # enabled = false
service = "screeps-svc.screeps.svc:443" redirect_to_https_bool = false
listen_port_80_bool = true
service = "screeps-svc.screeps.svc:21025"
} }
stirling = { stirling = {
enabled = false enabled = false
@@ -177,7 +180,7 @@ client_max_body_size 20m;
service = "web.piholenew.svc" service = "web.piholenew.svc"
} }
jellyfin = { jellyfin = {
enabled = false # enabled = false
service = "jellyfin-svc.jellyfin.svc:8096" service = "jellyfin-svc.jellyfin.svc:8096"
} }
gogs = { gogs = {
@@ -267,6 +270,9 @@ proxy_set_header Connection "upgrade";
EOT EOT
} }
pinchflat = {
enabled = false
service = "pinchflat-svc.pinchflat.svc:8945"
}
} }