pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add just in case

Browse Source
This commit is contained in:
pi-ux-ce
2024-11-07 11:53:30 +00:00
parent 700d508c8d
commit 786b1d56c0
3 changed files with 159 additions and 106 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/module.tf
+9 -6
View File
@@ -14,7 +14,7 @@ variable "nginx_sites" {
}))
}
/*
resource "local_file" "nginx" {
# for_each = var.nginx_sites
for_each = { for key, value in var.nginx_sites : key => value if value.enabled == true }
@@ -38,7 +38,7 @@ resource "local_file" "nginx" {
}
}
*/
#resource "kubernetes_config_map" "automatic-configmap" {
# metadata {
@@ -67,6 +67,9 @@ resource "kubernetes_config_map" "automatic-configmap" {
metadata {
name = "sites-terraform"
namespace = "reverse-proxy"
annotations = {
"reloader.stakater.com/match" : "true",
}
}
data = {
@@ -82,10 +85,10 @@ resource "kubernetes_config_map" "automatic-configmap" {
}) if value.enabled == true
}
provisioner "local-exec" {
command = "kubectl get pods -n reverse-proxy -o name | xargs -I{} kubectl delete -n reverse-proxy {}"
quiet = true
}
# provisioner "local-exec" {
# command = "kubectl get pods -n reverse-proxy -o name | xargs -I{} kubectl delete -n reverse-proxy {}"
# quiet = true
# }
}
terraform/nginx_config.tftpl
+1
View File
@@ -57,3 +57,4 @@ server {
return 404;
}
terraform/variables.auto.tfvars
+149 -100
View File
@@ -1,52 +1,52 @@
nginx_sites = {
bitwarden = {
service = "nginx.bitwarden.svc:8080"
http2_bool = true
}
bitwarden = {
service = "nginx.bitwarden.svc:8080"
http2_bool = true
}
bookstack = {
service = "webserver.bookstack.svc"
proxy_cache = false
}
django = {
service = "webserver.django-python.svc:8000"
proxy_cache = true
http2_bool = true
}
echo = {
service = "echo-server.echo-server.svc:80"
proxy_cache = true
http2_bool = true
}
gitlab = {
service = "webserver.gitlab.svc:443"
proxy_cache = true
extra_value_bool = true
extra-value = <<EOT
bookstack = {
service = "webserver.bookstack.svc"
proxy_cache = false
}
django = {
service = "webserver.django-python.svc:8000"
proxy_cache = true
http2_bool = true
}
echo = {
service = "echo-server.echo-server.svc:80"
proxy_cache = true
http2_bool = true
}
gitlab = {
service = "webserver.gitlab.svc:443"
proxy_cache = true
extra_value_bool = true
extra-value = <<EOT
client_max_body_size 20m;
proxy_request_buffering off;
EOT
http2_bool = true
proxy_pass_https = true
}
sonarr = {
service = "sonarr.servarr.svc"
}
http2_bool = true
proxy_pass_https = true
}
sonarr = {
service = "sonarr.servarr.svc"
}
keycloak = {
service = "keycloak.keycloak.svc:8080"
extra-value = <<EOT
keycloak = {
service = "keycloak.keycloak.svc:8080"
extra-value = <<EOT
set_real_ip_from 0.0.0.0/0;
real_ip_header X-Real-IP;
real_ip_recursive on;
EOT
}
nextcloud = {
service = "webserver.nextcloud.svc"
proxy_cache = true
http2_bool = true
extra-value = <<EOT
}
nextcloud = {
service = "webserver.nextcloud.svc"
proxy_cache = true
http2_bool = true
extra-value = <<EOT
location /.well-known/carddav {
@@ -62,73 +62,122 @@ client_max_body_size 20m;
return 200 "<!DOCTYPE html><h2>health check</h2>\n";
}
EOT
}
}
router = {
service = "192.168.88.1"
authentication_required = true
}
homeassistant = {
service = "homeassistant.homeassistant.svc:8123"
}
octoprint = {
service = "192.168.1.28:5000"
}
onitama = {
service = "onitama.onitama.svc"
}
router = {
service = "192.168.88.1"
authentication_required = true
}
homeassistant = {
service = "homeassistant.homeassistant.svc:8123"
}
octoprint = {
service = "192.168.1.28:5000"
}
onitama = {
service = "onitama.onitama.svc"
enabled = false
}
opentrashmail = {
# service = "opentrashmail.opentrashmail.svc"
service = "1.1.1.1"
enabled = false
}
paperless-docker = {
service = "192.168.88.50:4887"
}
paperless = {
service = "webserver.paperless.svc:8000"
}
pihole = {
service = "172.16.0.60:8081"
enabled = false
}
portainer = {
service = "portainer.portainer.svc"
}
prowlarr = {
service = "prowlarr.servarr.svc"
}
proxmox = {
service = "192.168.6.2:8006"
enabled = false
}
qbittorrent = {
service = "qbittorrent.servarr.svc:8080"
}
radarr = {
service = "radarr.servarr.svc"
}
reverse = {
service = "192.168.88.50:8888"
enabled = false
}
sickchill = {
service = "sickchill.servarr.svc"
}
transmission = {
service = "192.168.88.52:31091"
enabled = false
}
unifi = {
service = "192.168.88.52:31043"
}
unifi-inform = {
service = "192.168.88.50:8082"
}
opentrashmail = {
# service = "opentrashmail.opentrashmail.svc"
service = "1.1.1.1"
enabled = false
}
paperless-docker = {
service = "192.168.88.50:4887"
}
paperless = {
service = "webserver.paperless.svc:8000"
}
pihole = {
service = "172.16.0.60:8081"
enabled = false
}
portainer = {
service = "portainer.portainer.svc"
}
prowlarr = {
service = "prowlarr.servarr.svc"
}
proxmox = {
service = "192.168.6.2:8006"
enabled = false
}
qbittorrent = {
service = "qbittorrent.servarr.svc:8080"
}
radarr = {
service = "radarr.servarr.svc"
}
reverse = {
service = "192.168.88.50:8888"
enabled = false
}
sickchill = {
service = "sickchill.servarr.svc"
}
transmission = {
service = "192.168.88.52:31091"
enabled = false
}
unifi = {
service = "192.168.88.52:31043"
}
unifi-inform = {
service = "192.168.88.50:8082"
}
dupeguru = {
service = "dupeguru.dupeguru.svc:5800"
authentication_required = true
}
immich = {
service = "immich-server.immich.svc:3001"
}
netdata = {
enabled = false
service = "netdata-agent.netdata.svc:19999"
}
screeps = {
enabled = false
service = "screeps.screeps.svc:21025"
}
vulcan = {
service = "vulcan.vulcan.svc:80"
enabled = false
}
djangoterra = {
enabled = false
service = "djangoterra-svc.djangoterra.svc:8000"
}
nginx = {
enabled = false
service = "nginx-svc.nginx.svc"
}
openmediavault = {
service = "192.168.88.42"
}
pihole = {
service = "web.piholenew.svc"
}
jellyfin = {
service = "jellyfin.jellyfin.svc:8096"
}
gogs = {
enabled = false
service = "gogs-svc.gogs.svc:3000"
}
synology = {
enabled = true
service = "192.168.88.39:5001"
}
gitea = {
enabled = true
service = "webserver.gitea.svc:3000"
}
}