pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add just in case

Browse Source
This commit is contained in:
pi-ux-ce
2024-11-07 11:53:30 +00:00
parent 700d508c8d
commit 786b1d56c0
3 changed files with 159 additions and 106 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/module.tf
+9 -6
View File
@@ -14,7 +14,7 @@ variable "nginx_sites" {
})) }))
} }
/*
resource "local_file" "nginx" { resource "local_file" "nginx" {
# for_each = var.nginx_sites # for_each = var.nginx_sites
for_each = { for key, value in var.nginx_sites : key => value if value.enabled == true } for_each = { for key, value in var.nginx_sites : key => value if value.enabled == true }
@@ -38,7 +38,7 @@ resource "local_file" "nginx" {
} }
} }
*/
#resource "kubernetes_config_map" "automatic-configmap" { #resource "kubernetes_config_map" "automatic-configmap" {
# metadata { # metadata {
@@ -67,6 +67,9 @@ resource "kubernetes_config_map" "automatic-configmap" {
metadata { metadata {
name = "sites-terraform" name = "sites-terraform"
namespace = "reverse-proxy" namespace = "reverse-proxy"
annotations = {
"reloader.stakater.com/match" : "true",
}
} }
data = { data = {
@@ -82,10 +85,10 @@ resource "kubernetes_config_map" "automatic-configmap" {
}) if value.enabled == true }) if value.enabled == true
} }
provisioner "local-exec" { # provisioner "local-exec" {
command = "kubectl get pods -n reverse-proxy -o name | xargs -I{} kubectl delete -n reverse-proxy {}" # command = "kubectl get pods -n reverse-proxy -o name | xargs -I{} kubectl delete -n reverse-proxy {}"
quiet = true # quiet = true
} # }
} }
terraform/nginx_config.tftpl
+1
View File
@@ -57,3 +57,4 @@ server {
return 404; return 404;
} }
terraform/variables.auto.tfvars
+149 -100
View File
@@ -1,52 +1,52 @@
nginx_sites = { nginx_sites = {
bitwarden = { bitwarden = {
service = "nginx.bitwarden.svc:8080" service = "nginx.bitwarden.svc:8080"
http2_bool = true http2_bool = true
} }
bookstack = { bookstack = {
service = "webserver.bookstack.svc" service = "webserver.bookstack.svc"
proxy_cache = false proxy_cache = false
} }
django = { django = {
service = "webserver.django-python.svc:8000" service = "webserver.django-python.svc:8000"
proxy_cache = true proxy_cache = true
http2_bool = true http2_bool = true
} }
echo = { echo = {
service = "echo-server.echo-server.svc:80" service = "echo-server.echo-server.svc:80"
proxy_cache = true proxy_cache = true
http2_bool = true http2_bool = true
} }
gitlab = { gitlab = {
service = "webserver.gitlab.svc:443" service = "webserver.gitlab.svc:443"
proxy_cache = true proxy_cache = true
extra_value_bool = true extra_value_bool = true
extra-value = <<EOT extra-value = <<EOT
client_max_body_size 20m; client_max_body_size 20m;
proxy_request_buffering off; proxy_request_buffering off;
EOT EOT
http2_bool = true http2_bool = true
proxy_pass_https = true proxy_pass_https = true
} }
sonarr = { sonarr = {
service = "sonarr.servarr.svc" service = "sonarr.servarr.svc"
} }
keycloak = { keycloak = {
service = "keycloak.keycloak.svc:8080" service = "keycloak.keycloak.svc:8080"
extra-value = <<EOT extra-value = <<EOT
set_real_ip_from 0.0.0.0/0; set_real_ip_from 0.0.0.0/0;
real_ip_header X-Real-IP; real_ip_header X-Real-IP;
real_ip_recursive on; real_ip_recursive on;
EOT EOT
} }
nextcloud = { nextcloud = {
service = "webserver.nextcloud.svc" service = "webserver.nextcloud.svc"
proxy_cache = true proxy_cache = true
http2_bool = true http2_bool = true
extra-value = <<EOT extra-value = <<EOT
location /.well-known/carddav { location /.well-known/carddav {
@@ -62,73 +62,122 @@ client_max_body_size 20m;
return 200 "<!DOCTYPE html><h2>health check</h2>\n"; return 200 "<!DOCTYPE html><h2>health check</h2>\n";
} }
EOT EOT
} }
router = { router = {
service = "192.168.88.1" service = "192.168.88.1"
authentication_required = true authentication_required = true
} }
homeassistant = { homeassistant = {
service = "homeassistant.homeassistant.svc:8123" service = "homeassistant.homeassistant.svc:8123"
} }
octoprint = { octoprint = {
service = "192.168.1.28:5000" service = "192.168.1.28:5000"
} }
onitama = { onitama = {
service = "onitama.onitama.svc" service = "onitama.onitama.svc"
} enabled = false
}
opentrashmail = { opentrashmail = {
# service = "opentrashmail.opentrashmail.svc" # service = "opentrashmail.opentrashmail.svc"
service = "1.1.1.1" service = "1.1.1.1"
enabled = false enabled = false
} }
paperless-docker = { paperless-docker = {
service = "192.168.88.50:4887" service = "192.168.88.50:4887"
} }
paperless = { paperless = {
service = "webserver.paperless.svc:8000" service = "webserver.paperless.svc:8000"
} }
pihole = { pihole = {
service = "172.16.0.60:8081" service = "172.16.0.60:8081"
enabled = false enabled = false
} }
portainer = { portainer = {
service = "portainer.portainer.svc" service = "portainer.portainer.svc"
} }
prowlarr = { prowlarr = {
service = "prowlarr.servarr.svc" service = "prowlarr.servarr.svc"
} }
proxmox = { proxmox = {
service = "192.168.6.2:8006" service = "192.168.6.2:8006"
enabled = false enabled = false
} }
qbittorrent = { qbittorrent = {
service = "qbittorrent.servarr.svc:8080" service = "qbittorrent.servarr.svc:8080"
} }
radarr = { radarr = {
service = "radarr.servarr.svc" service = "radarr.servarr.svc"
} }
reverse = { reverse = {
service = "192.168.88.50:8888" service = "192.168.88.50:8888"
enabled = false enabled = false
} }
sickchill = { sickchill = {
service = "sickchill.servarr.svc" service = "sickchill.servarr.svc"
} }
transmission = { transmission = {
service = "192.168.88.52:31091" service = "192.168.88.52:31091"
enabled = false enabled = false
} }
unifi = { unifi = {
service = "192.168.88.52:31043" service = "192.168.88.52:31043"
} }
unifi-inform = { unifi-inform = {
service = "192.168.88.50:8082" service = "192.168.88.50:8082"
} }
dupeguru = {
service = "dupeguru.dupeguru.svc:5800"
authentication_required = true
}
immich = {
service = "immich-server.immich.svc:3001"
}
netdata = {
enabled = false
service = "netdata-agent.netdata.svc:19999"
}
screeps = {
enabled = false
service = "screeps.screeps.svc:21025"
}
vulcan = {
service = "vulcan.vulcan.svc:80"
enabled = false
}
djangoterra = {
enabled = false
service = "djangoterra-svc.djangoterra.svc:8000"
}
nginx = {
enabled = false
service = "nginx-svc.nginx.svc"
}
openmediavault = {
service = "192.168.88.42"
}
pihole = {
service = "web.piholenew.svc"
}
jellyfin = {
service = "jellyfin.jellyfin.svc:8096"
}
gogs = {
enabled = false
service = "gogs-svc.gogs.svc:3000"
}
synology = {
enabled = true
service = "192.168.88.39:5001"
}
gitea = {
enabled = true
service = "webserver.gitea.svc:3000"
}
} }