This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"version": 4,
|
||||
"terraform_version": "1.14.4",
|
||||
"serial": 1608,
|
||||
"serial": 1613,
|
||||
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
|
||||
"outputs": {
|
||||
"Nginx_status": {
|
||||
@@ -35,6 +35,7 @@
|
||||
"pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"redirect-testing.conf": "############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.tryton.geeraert.eu www.redirect-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.redirect-testing.tryton.geeraert.eu redirect-testing.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"redirect.conf": "############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.tryton.geeraert.eu www.redirect.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.redirect.tryton.geeraert.eu redirect.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
@@ -59,7 +60,7 @@
|
||||
"labels": {},
|
||||
"name": "sites-terraform",
|
||||
"namespace": "reverse-proxy",
|
||||
"resource_version": "274958265",
|
||||
"resource_version": "277516328",
|
||||
"uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e"
|
||||
}
|
||||
]
|
||||
@@ -142,6 +143,40 @@
|
||||
"private": "bnVsbA=="
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"mode": "managed",
|
||||
"type": "kubernetes_config_map",
|
||||
"name": "websites_configmap",
|
||||
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
|
||||
"instances": [
|
||||
{
|
||||
"schema_version": 0,
|
||||
"attributes": {
|
||||
"binary_data": {},
|
||||
"data": {
|
||||
"websites.json": "update_every: 1\nautodetection_retry: 0\njobs:\n - name: bitwarden\n url: https://bitwarden.tryton.geeraert.eu\n - name: django\n url: https://django.tryton.geeraert.eu\n - name: django-testing\n url: https://django-testing.tryton.geeraert.eu\n - name: gitea\n url: https://gitea.tryton.geeraert.eu\n - name: immich\n url: https://immich.tryton.geeraert.eu\n - name: jellyfin\n url: https://jellyfin.tryton.geeraert.eu\n - name: job-testing\n url: https://job-testing.tryton.geeraert.eu\n - name: nextcloud\n url: https://nextcloud.tryton.geeraert.eu\n - name: octoprint\n url: https://octoprint.tryton.geeraert.eu\n - name: openmediavault\n url: https://openmediavault.tryton.geeraert.eu\n - name: paperless\n url: https://paperless.tryton.geeraert.eu\n - name: pihole\n url: https://pihole.tryton.geeraert.eu\n - name: portainer\n url: https://portainer.tryton.geeraert.eu\n - name: prowlarr\n url: https://prowlarr.tryton.geeraert.eu\n - name: qbittorrent\n url: https://qbittorrent.tryton.geeraert.eu\n - name: radarr\n url: https://radarr.tryton.geeraert.eu\n - name: redirect\n url: https://redirect.tryton.geeraert.eu\n - name: redirect-testing\n url: https://redirect-testing.tryton.geeraert.eu\n - name: reverse\n url: https://reverse.tryton.geeraert.eu\n - name: router\n url: https://router.tryton.geeraert.eu\n - name: sonarr\n url: https://sonarr.tryton.geeraert.eu\n - name: stash\n url: https://stash.tryton.geeraert.eu\n - name: synology\n url: https://synology.tryton.geeraert.eu\n - name: unifi\n url: https://unifi.tryton.geeraert.eu\n - name: unifi-inform\n url: https://unifi-inform.tryton.geeraert.eu\n - name: wikijs\n url: https://wikijs.tryton.geeraert.eu\n"
|
||||
},
|
||||
"id": "netdata/sites-terraform",
|
||||
"immutable": false,
|
||||
"metadata": [
|
||||
{
|
||||
"annotations": {},
|
||||
"generate_name": "",
|
||||
"generation": 0,
|
||||
"labels": {},
|
||||
"name": "sites-terraform",
|
||||
"namespace": "netdata",
|
||||
"resource_version": "277516327",
|
||||
"uid": "8f41b07d-5fc0-4438-bde8-ca0c83b30ce2"
|
||||
}
|
||||
]
|
||||
},
|
||||
"sensitive_attributes": [],
|
||||
"identity_schema_version": 0,
|
||||
"private": "bnVsbA=="
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"check_results": null
|
||||
|
||||
Reference in New Issue
Block a user