🎨 add some terraform sites

terraform/terraform.tfstate

@@ -1,7 +1,7 @@
 {
   "version": 4,
   "terraform_version": "1.9.2",
-  "serial": 26,
+  "serial": 33,
   "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
   "outputs": {},
   "resources": [
@@ -67,6 +67,90 @@
             ]
           ]
         },
+        {
+          "index_key": "django",
+          "schema_version": 0,
+          "attributes": {
+            "content": "############################################\n#       config file for django\n############################################\n\nupstream django_backend {\n        server webserver.django-python.svc:8000;\n        server 1.1.1.1 backup;\n    }\n\nserver {\n        server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n        location / {\n                proxy_pass http://django_backend;\n                \n                location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t                proxy_cache          cache;\n\t                proxy_cache_key      $host$uri$is_args$args;\n\t                proxy_cache_valid    200 301 302 30m;\n\t                expires              30m;\n\t                proxy_pass  http://django_backend;\n\t\t}\n                \n        }\n        location /.well-known/acme-challenge/ {\n                root /var/www/certbot;\n        }\n\n                \n\n\n        \n        http2 on;\n        ssl_protocols TLSv1.2;\n        \n\n        listen 443 ssl;\n        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n        if ($host = www.django.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n\n        if ($host = django.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n        server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n        listen 80;\n        return 404;\n\n}\n",
+            "content_base64": null,
+            "content_base64sha256": "JgtzbX0/Lbqprbplt5uLgJIxYOT6UujNXJVeucEvd6k=",
+            "content_base64sha512": "5CfWA5fW94lfWqGLG6B+PiLi86eSd6qDyCe0oD4T7MfAhgbpTqpLAEuEUm3r8zMUjka/qGKukekKrsjDFadIxw==",
+            "content_md5": "0adb199fdbe99b316319c99adfa5e161",
+            "content_sha1": "10fb8bff769effeb34701187825fff1636b1b3b3",
+            "content_sha256": "260b736d7d3f2dbaa9adba65b79b8b80923160e4fa52e8cd5c955eb9c12f77a9",
+            "content_sha512": "e427d60397d6f7895f5aa18b1ba07e3e22e2f3a79277aa83c827b4a03e13ecc7c08606e94eaa4b004b84526debf333148e46bfa862ae91e90aaec8c315a748c7",
+            "directory_permission": "0777",
+            "file_permission": "0777",
+            "filename": "../conf.d/django.tryton.geeraert.eu.conf",
+            "id": "10fb8bff769effeb34701187825fff1636b1b3b3",
+            "sensitive_content": null,
+            "source": null
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "sensitive_content"
+              }
+            ]
+          ]
+        },
+        {
+          "index_key": "echo",
+          "schema_version": 0,
+          "attributes": {
+            "content": "############################################\n#       config file for echo\n############################################\n\nupstream echo_backend {\n        server echo-server.echo-server.svc:80;\n        server 1.1.1.1 backup;\n    }\n\nserver {\n        server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n        location / {\n                proxy_pass http://echo_backend;\n                \n                location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t                proxy_cache          cache;\n\t                proxy_cache_key      $host$uri$is_args$args;\n\t                proxy_cache_valid    200 301 302 30m;\n\t                expires              30m;\n\t                proxy_pass  http://echo_backend;\n\t\t}\n                \n        }\n        location /.well-known/acme-challenge/ {\n                root /var/www/certbot;\n        }\n\n                \n\n\n        \n        http2 on;\n        ssl_protocols TLSv1.2;\n        \n\n        listen 443 ssl;\n        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n        if ($host = www.echo.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n\n        if ($host = echo.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n        server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n        listen 80;\n        return 404;\n\n}\n",
+            "content_base64": null,
+            "content_base64sha256": "2JB/AZrF5sgi2qN2GV/An7UaQ43+BkANXGsqWoXDnvM=",
+            "content_base64sha512": "y4xsUka1eLho4KEjbII9KEGpc5sWwm6FoWU1SKXL02HbuJDW6p2WDQwVyaXHm0Oo7Bo1zG25Clf0NO+Xyehn2Q==",
+            "content_md5": "d5282cd5b3b1751d3e5d7e177852479c",
+            "content_sha1": "7735c984b3094199e43e74f357351ca36603c4ce",
+            "content_sha256": "d8907f019ac5e6c822daa376195fc09fb51a438dfe06400d5c6b2a5a85c39ef3",
+            "content_sha512": "cb8c6c5246b578b868e0a1236c823d2841a9739b16c26e85a1653548a5cbd361dbb890d6ea9d960d0c15c9a5c79b43a8ec1a35cc6db90a57f434ef97c9e867d9",
+            "directory_permission": "0777",
+            "file_permission": "0777",
+            "filename": "../conf.d/echo.tryton.geeraert.eu.conf",
+            "id": "7735c984b3094199e43e74f357351ca36603c4ce",
+            "sensitive_content": null,
+            "source": null
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "sensitive_content"
+              }
+            ]
+          ]
+        },
+        {
+          "index_key": "gitlab",
+          "schema_version": 0,
+          "attributes": {
+            "content": "############################################\n#       config file for gitlab\n############################################\n\nupstream gitlab_backend {\n        server webserver.gitlab.svc:443;\n        server 1.1.1.1 backup;\n    }\n\nserver {\n        server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n        location / {\n                proxy_pass http://gitlab_backend;\n                \n                location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t                proxy_cache          cache;\n\t                proxy_cache_key      $host$uri$is_args$args;\n\t                proxy_cache_valid    200 301 302 30m;\n\t                expires              30m;\n\t                proxy_pass  http://gitlab_backend;\n\t\t}\n                \n        }\n        location /.well-known/acme-challenge/ {\n                root /var/www/certbot;\n        }\n\n                \n                                client_max_body_size 20m;\n        proxy_request_buffering off;\n\n\n                \n\n\n        \n        http2 on;\n        ssl_protocols TLSv1.2;\n        \n\n        listen 443 ssl;\n        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n        if ($host = www.gitlab.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n\n        if ($host = gitlab.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n        server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n        listen 80;\n        return 404;\n\n}\n",
+            "content_base64": null,
+            "content_base64sha256": "O4CcdoDvlGq11cnnlPTRC8TIuhEfn6gLuHy/T292DXg=",
+            "content_base64sha512": "gNKOmGlLYfQYkZ9dSvZw7uAvD5bJcrZ3lIXETfOycg1bfkLZtP46EzPOoClCXHCwgqLcioThKj7AKAJwBMAUQA==",
+            "content_md5": "4a178aabb7b684430fbdd33b5b557a01",
+            "content_sha1": "5a67da7030bf7d54c3667b56f81b587a232c7e5d",
+            "content_sha256": "3b809c7680ef946ab5d5c9e794f4d10bc4c8ba111f9fa80bb87cbf4f6f760d78",
+            "content_sha512": "80d28e98694b61f418919f5d4af670eee02f0f96c972b6779485c44df3b2720d5b7e42d9b4fe3a1333cea029425c70b082a2dc8a84e12a3ec028027004c01440",
+            "directory_permission": "0777",
+            "file_permission": "0777",
+            "filename": "../conf.d/gitlab.tryton.geeraert.eu.conf",
+            "id": "5a67da7030bf7d54c3667b56f81b587a232c7e5d",
+            "sensitive_content": null,
+            "source": null
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "sensitive_content"
+              }
+            ]
+          ]
+        },
         {
           "index_key": "keycloak",
           "schema_version": 0,

terraform/terraform.tfstate.backup

@@ -1,7 +1,7 @@
 {
   "version": 4,
   "terraform_version": "1.9.2",
-  "serial": 24,
+  "serial": 30,
   "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
   "outputs": {},
   "resources": [
@@ -39,6 +39,118 @@
             ]
           ]
         },
+        {
+          "index_key": "bookstack",
+          "schema_version": 0,
+          "attributes": {
+            "content": "############################################\n#       config file for bookstack\n############################################\n\nupstream bookstack_backend {\n        server webserver.bookstack.svc;\n        server 1.1.1.1 backup;\n    }\n\nserver {\n        server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n        location / {\n                proxy_pass http://bookstack_backend;\n                \n                location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t                proxy_cache          cache;\n\t                proxy_cache_key      $host$uri$is_args$args;\n\t                proxy_cache_valid    200 301 302 30m;\n\t                expires              30m;\n\t                proxy_pass  http://bookstack_backend;\n\t\t}\n                \n        }\n        location /.well-known/acme-challenge/ {\n                root /var/www/certbot;\n        }\n\n                \n\n\n        \n\n        listen 443 ssl;\n        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n        if ($host = www.bookstack.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n\n        if ($host = bookstack.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n        server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n        listen 80;\n        return 404;\n\n}\n",
+            "content_base64": null,
+            "content_base64sha256": "OXSKkaAcbeozovKy/9nhsyLxfunVe6p3OZz0y+XnFv4=",
+            "content_base64sha512": "YGVEVKPjCgEqt8hA1k7BX9EyCdYzwtSrQ3v9/Pit63CYm1ip3ChlcOTVwFEg4vl+K+A2sYyAfgOQhglJLDWGCg==",
+            "content_md5": "f66b1e1c42e4f61b264079cb06117713",
+            "content_sha1": "d6b587bfdd8fd65d1c167c554274964a73c97308",
+            "content_sha256": "39748a91a01c6dea33a2f2b2ffd9e1b322f17ee9d57baa77399cf4cbe5e716fe",
+            "content_sha512": "60654454a3e30a012ab7c840d64ec15fd13209d633c2d4ab437bfdfcf8adeb70989b58a9dc286570e4d5c05120e2f97e2be036b18c807e03908609492c35860a",
+            "directory_permission": "0777",
+            "file_permission": "0777",
+            "filename": "../conf.d/bookstack.tryton.geeraert.eu.conf",
+            "id": "d6b587bfdd8fd65d1c167c554274964a73c97308",
+            "sensitive_content": null,
+            "source": null
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "sensitive_content"
+              }
+            ]
+          ]
+        },
+        {
+          "index_key": "django",
+          "schema_version": 0,
+          "attributes": {
+            "content": "############################################\n#       config file for django\n############################################\n\nupstream django_backend {\n        server webserver.django-python.svc:8000;\n        server 1.1.1.1 backup;\n    }\n\nserver {\n        server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n        location / {\n                proxy_pass http://django_backend;\n                \n                location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t                proxy_cache          cache;\n\t                proxy_cache_key      $host$uri$is_args$args;\n\t                proxy_cache_valid    200 301 302 30m;\n\t                expires              30m;\n\t                proxy_pass  http://django_backend;\n\t\t}\n                \n        }\n        location /.well-known/acme-challenge/ {\n                root /var/www/certbot;\n        }\n\n                \n\n\n        \n        http2 on;\n        ssl_protocols TLSv1.2;\n        \n\n        listen 443 ssl;\n        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n        if ($host = www.django.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n\n        if ($host = django.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n        server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n        listen 80;\n        return 404;\n\n}\n",
+            "content_base64": null,
+            "content_base64sha256": "JgtzbX0/Lbqprbplt5uLgJIxYOT6UujNXJVeucEvd6k=",
+            "content_base64sha512": "5CfWA5fW94lfWqGLG6B+PiLi86eSd6qDyCe0oD4T7MfAhgbpTqpLAEuEUm3r8zMUjka/qGKukekKrsjDFadIxw==",
+            "content_md5": "0adb199fdbe99b316319c99adfa5e161",
+            "content_sha1": "10fb8bff769effeb34701187825fff1636b1b3b3",
+            "content_sha256": "260b736d7d3f2dbaa9adba65b79b8b80923160e4fa52e8cd5c955eb9c12f77a9",
+            "content_sha512": "e427d60397d6f7895f5aa18b1ba07e3e22e2f3a79277aa83c827b4a03e13ecc7c08606e94eaa4b004b84526debf333148e46bfa862ae91e90aaec8c315a748c7",
+            "directory_permission": "0777",
+            "file_permission": "0777",
+            "filename": "../conf.d/django.tryton.geeraert.eu.conf",
+            "id": "10fb8bff769effeb34701187825fff1636b1b3b3",
+            "sensitive_content": null,
+            "source": null
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "sensitive_content"
+              }
+            ]
+          ]
+        },
+        {
+          "index_key": "echo",
+          "schema_version": 0,
+          "attributes": {
+            "content": "############################################\n#       config file for echo\n############################################\n\nupstream echo_backend {\n        server echo-server.echo-server.svc:80;\n        server 1.1.1.1 backup;\n    }\n\nserver {\n        server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n        location / {\n                proxy_pass http://echo_backend;\n                \n                location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t                proxy_cache          cache;\n\t                proxy_cache_key      $host$uri$is_args$args;\n\t                proxy_cache_valid    200 301 302 30m;\n\t                expires              30m;\n\t                proxy_pass  http://echo_backend;\n\t\t}\n                \n        }\n        location /.well-known/acme-challenge/ {\n                root /var/www/certbot;\n        }\n\n                \n\n\n        \n        http2 on;\n        ssl_protocols TLSv1.2;\n        \n\n        listen 443 ssl;\n        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n        if ($host = www.echo.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n\n        if ($host = echo.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n        server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n        listen 80;\n        return 404;\n\n}\n",
+            "content_base64": null,
+            "content_base64sha256": "2JB/AZrF5sgi2qN2GV/An7UaQ43+BkANXGsqWoXDnvM=",
+            "content_base64sha512": "y4xsUka1eLho4KEjbII9KEGpc5sWwm6FoWU1SKXL02HbuJDW6p2WDQwVyaXHm0Oo7Bo1zG25Clf0NO+Xyehn2Q==",
+            "content_md5": "d5282cd5b3b1751d3e5d7e177852479c",
+            "content_sha1": "7735c984b3094199e43e74f357351ca36603c4ce",
+            "content_sha256": "d8907f019ac5e6c822daa376195fc09fb51a438dfe06400d5c6b2a5a85c39ef3",
+            "content_sha512": "cb8c6c5246b578b868e0a1236c823d2841a9739b16c26e85a1653548a5cbd361dbb890d6ea9d960d0c15c9a5c79b43a8ec1a35cc6db90a57f434ef97c9e867d9",
+            "directory_permission": "0777",
+            "file_permission": "0777",
+            "filename": "../conf.d/echo.tryton.geeraert.eu.conf",
+            "id": "7735c984b3094199e43e74f357351ca36603c4ce",
+            "sensitive_content": null,
+            "source": null
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "sensitive_content"
+              }
+            ]
+          ]
+        },
+        {
+          "index_key": "gitlab",
+          "schema_version": 0,
+          "attributes": {
+            "content": "############################################\n#       config file for gitlab\n############################################\n\nupstream gitlab_backend {\n        server webserver.gitlab.svc:443;;\n        server 1.1.1.1 backup;\n    }\n\nserver {\n        server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n        location / {\n                proxy_pass http://gitlab_backend;\n                \n                location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t                proxy_cache          cache;\n\t                proxy_cache_key      $host$uri$is_args$args;\n\t                proxy_cache_valid    200 301 302 30m;\n\t                expires              30m;\n\t                proxy_pass  http://gitlab_backend;\n\t\t}\n                \n        }\n        location /.well-known/acme-challenge/ {\n                root /var/www/certbot;\n        }\n\n                \n                                client_max_body_size 20m;\n        proxy_request_buffering off;\n\n\n                \n\n\n        \n        http2 on;\n        ssl_protocols TLSv1.2;\n        \n\n        listen 443 ssl;\n        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n        if ($host = www.gitlab.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n\n        if ($host = gitlab.tryton.geeraert.eu) {\n                return 301 https://$host$request_uri;\n        }\n\n        server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n        listen 80;\n        return 404;\n\n}\n",
+            "content_base64": null,
+            "content_base64sha256": "fWc7WeWvL4PDsDC5FV028oEy8K0vH8U7IEXMPVBKC8s=",
+            "content_base64sha512": "M5wVnOCko7LFFqLgYws3ot2YlyENMIepBXFttVEIaAyiOn0sWOPaiWK1KqQH9FzpDdFvr0LXN84eLjokFX8ruw==",
+            "content_md5": "96df284513f7a350938eaf638f2e836f",
+            "content_sha1": "2fbe84cd7f5bbaea914a3e8db2ceabb024d1c456",
+            "content_sha256": "7d673b59e5af2f83c3b030b9155d36f28132f0ad2f1fc53b2045cc3d504a0bcb",
+            "content_sha512": "339c159ce0a4a3b2c516a2e0630b37a2dd9897210d3087a905716db55108680ca23a7d2c58e3da8962b52aa407f45ce90dd16faf42d737ce1e2e3a24157f2bbb",
+            "directory_permission": "0777",
+            "file_permission": "0777",
+            "filename": "../conf.d/gitlab.tryton.geeraert.eu.conf",
+            "id": "2fbe84cd7f5bbaea914a3e8db2ceabb024d1c456",
+            "sensitive_content": null,
+            "source": null
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "sensitive_content"
+              }
+            ]
+          ]
+        },
         {
           "index_key": "keycloak",
           "schema_version": 0,

terraform/variables.auto.tfvars

@@ -14,7 +14,31 @@ nginx_sites = {
                 extra-value = false
                 http2_bool = false
         }
+        django = {
+                service = "webserver.django-python.svc:8000"
+                proxy_cache = true
+                extra_value_bool = false
+                extra-value = false
+                http2_bool = true
+        }
+        echo = {
+                service = "echo-server.echo-server.svc:80"
+                proxy_cache = true
+                extra_value_bool = false
+                extra-value = false
+                http2_bool = true
+        }
+        gitlab = {
+                service = "webserver.gitlab.svc:443"
+                proxy_cache = true
+                extra_value_bool = true
+                extra-value = <<EOT
+        client_max_body_size 20m;
+        proxy_request_buffering off;
 
+EOT
+                http2_bool = true
+        }
         sonarr = {
                 service  = "sonarr.servarr.svc"
                 proxy_cache = false