From 8b9c11d383be0fc012f588439b4d9d556de766bc Mon Sep 17 00:00:00 2001 From: pierre Date: Thu, 25 Jul 2024 18:00:18 +0100 Subject: [PATCH] :art: add some terraform sites --- terraform/terraform.tfstate | 86 +++++++++++++++++++++- terraform/terraform.tfstate.backup | 114 ++++++++++++++++++++++++++++- terraform/variables.auto.tfvars | 24 ++++++ 3 files changed, 222 insertions(+), 2 deletions(-) diff --git a/terraform/terraform.tfstate b/terraform/terraform.tfstate index 7fbe1b7..5f106dd 100644 --- a/terraform/terraform.tfstate +++ b/terraform/terraform.tfstate @@ -1,7 +1,7 @@ { "version": 4, "terraform_version": "1.9.2", - "serial": 26, + "serial": 33, "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e", "outputs": {}, "resources": [ @@ -67,6 +67,90 @@ ] ] }, + { + "index_key": "django", + "schema_version": 0, + "attributes": { + "content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", + "content_base64": null, + "content_base64sha256": "JgtzbX0/Lbqprbplt5uLgJIxYOT6UujNXJVeucEvd6k=", + "content_base64sha512": "5CfWA5fW94lfWqGLG6B+PiLi86eSd6qDyCe0oD4T7MfAhgbpTqpLAEuEUm3r8zMUjka/qGKukekKrsjDFadIxw==", + "content_md5": "0adb199fdbe99b316319c99adfa5e161", + "content_sha1": "10fb8bff769effeb34701187825fff1636b1b3b3", + "content_sha256": "260b736d7d3f2dbaa9adba65b79b8b80923160e4fa52e8cd5c955eb9c12f77a9", + "content_sha512": "e427d60397d6f7895f5aa18b1ba07e3e22e2f3a79277aa83c827b4a03e13ecc7c08606e94eaa4b004b84526debf333148e46bfa862ae91e90aaec8c315a748c7", + "directory_permission": "0777", + "file_permission": "0777", + "filename": "../conf.d/django.tryton.geeraert.eu.conf", + "id": "10fb8bff769effeb34701187825fff1636b1b3b3", + "sensitive_content": null, + "source": null + }, + "sensitive_attributes": [ + [ + { + "type": "get_attr", + "value": "sensitive_content" + } + ] + ] + }, + { + "index_key": "echo", + "schema_version": 0, + "attributes": { + "content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", + "content_base64": null, + "content_base64sha256": "2JB/AZrF5sgi2qN2GV/An7UaQ43+BkANXGsqWoXDnvM=", + "content_base64sha512": "y4xsUka1eLho4KEjbII9KEGpc5sWwm6FoWU1SKXL02HbuJDW6p2WDQwVyaXHm0Oo7Bo1zG25Clf0NO+Xyehn2Q==", + "content_md5": "d5282cd5b3b1751d3e5d7e177852479c", + "content_sha1": "7735c984b3094199e43e74f357351ca36603c4ce", + "content_sha256": "d8907f019ac5e6c822daa376195fc09fb51a438dfe06400d5c6b2a5a85c39ef3", + "content_sha512": "cb8c6c5246b578b868e0a1236c823d2841a9739b16c26e85a1653548a5cbd361dbb890d6ea9d960d0c15c9a5c79b43a8ec1a35cc6db90a57f434ef97c9e867d9", + "directory_permission": "0777", + "file_permission": "0777", + "filename": "../conf.d/echo.tryton.geeraert.eu.conf", + "id": "7735c984b3094199e43e74f357351ca36603c4ce", + "sensitive_content": null, + "source": null + }, + "sensitive_attributes": [ + [ + { + "type": "get_attr", + "value": "sensitive_content" + } + ] + ] + }, + { + "index_key": "gitlab", + "schema_version": 0, + "attributes": { + "content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitlab_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n client_max_body_size 20m;\n proxy_request_buffering off;\n\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", + "content_base64": null, + "content_base64sha256": "O4CcdoDvlGq11cnnlPTRC8TIuhEfn6gLuHy/T292DXg=", + "content_base64sha512": "gNKOmGlLYfQYkZ9dSvZw7uAvD5bJcrZ3lIXETfOycg1bfkLZtP46EzPOoClCXHCwgqLcioThKj7AKAJwBMAUQA==", + "content_md5": "4a178aabb7b684430fbdd33b5b557a01", + "content_sha1": "5a67da7030bf7d54c3667b56f81b587a232c7e5d", + "content_sha256": "3b809c7680ef946ab5d5c9e794f4d10bc4c8ba111f9fa80bb87cbf4f6f760d78", + "content_sha512": "80d28e98694b61f418919f5d4af670eee02f0f96c972b6779485c44df3b2720d5b7e42d9b4fe3a1333cea029425c70b082a2dc8a84e12a3ec028027004c01440", + "directory_permission": "0777", + "file_permission": "0777", + "filename": "../conf.d/gitlab.tryton.geeraert.eu.conf", + "id": "5a67da7030bf7d54c3667b56f81b587a232c7e5d", + "sensitive_content": null, + "source": null + }, + "sensitive_attributes": [ + [ + { + "type": "get_attr", + "value": "sensitive_content" + } + ] + ] + }, { "index_key": "keycloak", "schema_version": 0, diff --git a/terraform/terraform.tfstate.backup b/terraform/terraform.tfstate.backup index 0258c18..806c0c3 100644 --- a/terraform/terraform.tfstate.backup +++ b/terraform/terraform.tfstate.backup @@ -1,7 +1,7 @@ { "version": 4, "terraform_version": "1.9.2", - "serial": 24, + "serial": 30, "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e", "outputs": {}, "resources": [ @@ -39,6 +39,118 @@ ] ] }, + { + "index_key": "bookstack", + "schema_version": 0, + "attributes": { + "content": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server webserver.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://bookstack_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", + "content_base64": null, + "content_base64sha256": "OXSKkaAcbeozovKy/9nhsyLxfunVe6p3OZz0y+XnFv4=", + "content_base64sha512": "YGVEVKPjCgEqt8hA1k7BX9EyCdYzwtSrQ3v9/Pit63CYm1ip3ChlcOTVwFEg4vl+K+A2sYyAfgOQhglJLDWGCg==", + "content_md5": "f66b1e1c42e4f61b264079cb06117713", + "content_sha1": "d6b587bfdd8fd65d1c167c554274964a73c97308", + "content_sha256": "39748a91a01c6dea33a2f2b2ffd9e1b322f17ee9d57baa77399cf4cbe5e716fe", + "content_sha512": "60654454a3e30a012ab7c840d64ec15fd13209d633c2d4ab437bfdfcf8adeb70989b58a9dc286570e4d5c05120e2f97e2be036b18c807e03908609492c35860a", + "directory_permission": "0777", + "file_permission": "0777", + "filename": "../conf.d/bookstack.tryton.geeraert.eu.conf", + "id": "d6b587bfdd8fd65d1c167c554274964a73c97308", + "sensitive_content": null, + "source": null + }, + "sensitive_attributes": [ + [ + { + "type": "get_attr", + "value": "sensitive_content" + } + ] + ] + }, + { + "index_key": "django", + "schema_version": 0, + "attributes": { + "content": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", + "content_base64": null, + "content_base64sha256": "JgtzbX0/Lbqprbplt5uLgJIxYOT6UujNXJVeucEvd6k=", + "content_base64sha512": "5CfWA5fW94lfWqGLG6B+PiLi86eSd6qDyCe0oD4T7MfAhgbpTqpLAEuEUm3r8zMUjka/qGKukekKrsjDFadIxw==", + "content_md5": "0adb199fdbe99b316319c99adfa5e161", + "content_sha1": "10fb8bff769effeb34701187825fff1636b1b3b3", + "content_sha256": "260b736d7d3f2dbaa9adba65b79b8b80923160e4fa52e8cd5c955eb9c12f77a9", + "content_sha512": "e427d60397d6f7895f5aa18b1ba07e3e22e2f3a79277aa83c827b4a03e13ecc7c08606e94eaa4b004b84526debf333148e46bfa862ae91e90aaec8c315a748c7", + "directory_permission": "0777", + "file_permission": "0777", + "filename": "../conf.d/django.tryton.geeraert.eu.conf", + "id": "10fb8bff769effeb34701187825fff1636b1b3b3", + "sensitive_content": null, + "source": null + }, + "sensitive_attributes": [ + [ + { + "type": "get_attr", + "value": "sensitive_content" + } + ] + ] + }, + { + "index_key": "echo", + "schema_version": 0, + "attributes": { + "content": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", + "content_base64": null, + "content_base64sha256": "2JB/AZrF5sgi2qN2GV/An7UaQ43+BkANXGsqWoXDnvM=", + "content_base64sha512": "y4xsUka1eLho4KEjbII9KEGpc5sWwm6FoWU1SKXL02HbuJDW6p2WDQwVyaXHm0Oo7Bo1zG25Clf0NO+Xyehn2Q==", + "content_md5": "d5282cd5b3b1751d3e5d7e177852479c", + "content_sha1": "7735c984b3094199e43e74f357351ca36603c4ce", + "content_sha256": "d8907f019ac5e6c822daa376195fc09fb51a438dfe06400d5c6b2a5a85c39ef3", + "content_sha512": "cb8c6c5246b578b868e0a1236c823d2841a9739b16c26e85a1653548a5cbd361dbb890d6ea9d960d0c15c9a5c79b43a8ec1a35cc6db90a57f434ef97c9e867d9", + "directory_permission": "0777", + "file_permission": "0777", + "filename": "../conf.d/echo.tryton.geeraert.eu.conf", + "id": "7735c984b3094199e43e74f357351ca36603c4ce", + "sensitive_content": null, + "source": null + }, + "sensitive_attributes": [ + [ + { + "type": "get_attr", + "value": "sensitive_content" + } + ] + ] + }, + { + "index_key": "gitlab", + "schema_version": 0, + "attributes": { + "content": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitlab_backend;\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n \n client_max_body_size 20m;\n proxy_request_buffering off;\n\n\n \n\n\n \n http2 on;\n ssl_protocols TLSv1.2;\n \n\n listen 443 ssl;\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}\n", + "content_base64": null, + "content_base64sha256": "fWc7WeWvL4PDsDC5FV028oEy8K0vH8U7IEXMPVBKC8s=", + "content_base64sha512": "M5wVnOCko7LFFqLgYws3ot2YlyENMIepBXFttVEIaAyiOn0sWOPaiWK1KqQH9FzpDdFvr0LXN84eLjokFX8ruw==", + "content_md5": "96df284513f7a350938eaf638f2e836f", + "content_sha1": "2fbe84cd7f5bbaea914a3e8db2ceabb024d1c456", + "content_sha256": "7d673b59e5af2f83c3b030b9155d36f28132f0ad2f1fc53b2045cc3d504a0bcb", + "content_sha512": "339c159ce0a4a3b2c516a2e0630b37a2dd9897210d3087a905716db55108680ca23a7d2c58e3da8962b52aa407f45ce90dd16faf42d737ce1e2e3a24157f2bbb", + "directory_permission": "0777", + "file_permission": "0777", + "filename": "../conf.d/gitlab.tryton.geeraert.eu.conf", + "id": "2fbe84cd7f5bbaea914a3e8db2ceabb024d1c456", + "sensitive_content": null, + "source": null + }, + "sensitive_attributes": [ + [ + { + "type": "get_attr", + "value": "sensitive_content" + } + ] + ] + }, { "index_key": "keycloak", "schema_version": 0, diff --git a/terraform/variables.auto.tfvars b/terraform/variables.auto.tfvars index 666e0f2..3b387f7 100644 --- a/terraform/variables.auto.tfvars +++ b/terraform/variables.auto.tfvars @@ -14,7 +14,31 @@ nginx_sites = { extra-value = false http2_bool = false } + django = { + service = "webserver.django-python.svc:8000" + proxy_cache = true + extra_value_bool = false + extra-value = false + http2_bool = true + } + echo = { + service = "echo-server.echo-server.svc:80" + proxy_cache = true + extra_value_bool = false + extra-value = false + http2_bool = true + } + gitlab = { + service = "webserver.gitlab.svc:443" + proxy_cache = true + extra_value_bool = true + extra-value = <