From 661ee11d6d10a3c1845d63eaf3526b1b0f985e9a Mon Sep 17 00:00:00 2001
From: "pierre.geeraert" <pierre.geeraert@betfred.com>
Date: Mon, 12 Oct 2026 18:34:25 +0100
Subject: [PATCH] big cleanup

---
 reverse-proxy/variables.auto.tfvars | 242 +++-------------------------
 1 file changed, 19 insertions(+), 223 deletions(-)

diff --git a/reverse-proxy/variables.auto.tfvars b/reverse-proxy/variables.auto.tfvars
index a82c7e8..cf08782 100644
--- a/reverse-proxy/variables.auto.tfvars
+++ b/reverse-proxy/variables.auto.tfvars
@@ -1,12 +1,5 @@
 nginx_sites = {
   bitwarden = {
-    #service = "nginx.bitwarden.svc:8080"
-    #extra-value-location = <<EOT
-    #proxy_set_header      Host $host;
-    #proxy_set_header      X-Real-IP $remote_addr;
-    #proxy_set_header      X-Forwarded-For $proxy_add_x_forwarded_for;
-    #proxy_set_header      Proxy "";
-    #            EOT
     service                 = "bitwarden-nginx-svc.bitwarden.svc:8080"
     http2_bool              = true
     redirect_to_root_domain = false
@@ -14,7 +7,6 @@ nginx_sites = {
 
   bookstack = {
     enabled = false
-    #    service     = "webserver.bookstack.svc"
     service     = "bookstack-svc.bookstack.svc"
     proxy_cache = false
   }
@@ -128,75 +120,19 @@ nginx_sites = {
   }
   echo = {
     enabled = true
-    #    service     = "echo-server.echo-server.svc:80"
     service        = "echo-svc.echo.svc"
     docker_service = "echo"
     proxy_cache    = true
     http2_bool     = true
-
-    #extra-value-location = <<EOT
-    #  auth_request /oauth2/auth;
-    #  error_page 401 = @oauth2_signin;
-    #  proxy_set_header X-Auth-Request-Redirect $request_uri;
-    #            EOT
-
-    #extra-value = <<EOT
-    #  location = /oauth2/auth {
-    #  internal;
-    #proxy_pass http://oauthn_backend;
-    ##        proxy_pass https://oauthn.tryton.geeraert.eu/oauth2/auth;
-    # proxy_pass_request_body off;
-    #  proxy_set_header Content-Length "";
-    #  proxy_set_header X-Original-URI $request_uri;
-    #  proxy_set_header X-Real-IP $remote_addr;
-    #  proxy_set_header X-Scheme $scheme;
-    #}
-
-    #location @oauth2_signin {
-    #  return 302 https://$host/oauth2/start?rd=https://$host$request_uri;
-    #  #return 302 https://oauthn.tryton.geeraert.eu/oauth2/start?rd=https://$host$request_uri;
-    #}
-
-    #location /oauth2/ {
-    #proxy_pass http://oauthn_backend;
-    #proxy_set_header Host $host;
-    #proxy_set_header X-Real-IP $remote_addr;
-    #proxy_set_header X-Scheme $scheme;
-    #proxy_set_header X-Auth-Request-Redirect $request_uri;
-    #}
-
-    #            EOT
-
-
-  }
-  gitlab = {
-    service          = "webserver.gitlab.svc:443"
-    proxy_cache      = true
-    extra_value_bool = true
-    enabled          = false
-    extra-value      = <<EOT
-client_max_body_size 20m;
-	proxy_request_buffering off;
-                EOT
-    http2_bool       = true
-    proxy_pass_https = true
   }
+
   sonarr = {
     service     = "sonarr-svc.servarr.svc:8989"
     geoip_allow = ["FR", "GB", "NL"]
 
   }
 
-  keycloak = {
-    service     = "keycloak.keycloak.svc:8080"
-    enabled     = false
-    extra-value = <<EOT
 
-        set_real_ip_from 0.0.0.0/0;
-        real_ip_header X-Real-IP;
-        real_ip_recursive on;
-                        EOT
-  }
   nextcloud = {
     redirect_to_root_domain = false
     service                 = "webserver.nextcloud.svc"
@@ -224,13 +160,12 @@ client_max_body_size 20m;
 
 
   router = {
+    enabled     = false
+
     service                 = "192.168.88.1"
     authentication_required = true
   }
-  homeassistant = {
-    enabled = false
-    service = "homeassistant-svc.homeassistant.svc:8123"
-  }
+
   octoprint = {
     service              = "192.168.0.32:5000"
     extra-value-location = <<EOT
@@ -253,11 +188,7 @@ client_max_body_size 20m;
     enabled = false
   }
 
-  opentrashmail = {
-    #                service = "opentrashmail.opentrashmail.svc"
-    service = "1.1.1.1"
-    enabled = false
-  }
+
   paperless = {
     #service = "webserver.paperless.svc:8000"
     service = "paperless-svc.paperless.svc:8000"
@@ -266,18 +197,13 @@ client_max_body_size 20m;
     service = "172.16.0.60:8081"
     enabled = false
   }
-  portainer = {
-    service = "portainer.portainer.svc"
-  }
+
   prowlarr = {
     service     = "prowlarr-svc.servarr.svc:9696"
     geoip_allow = ["FR", "GB", "NL"]
 
   }
-  proxmox = {
-    service = "192.168.6.2:8006"
-    enabled = false
-  }
+
   qbittorrent = {
     #enabled     = false
     service     = "qbittorrent-svc.servarr.svc:8080"
@@ -289,22 +215,8 @@ client_max_body_size 20m;
     geoip_allow = ["FR", "GB", "NL"]
 
   }
-  recommendarr = {
-    service = "recommendarr-svc.servarr.svc:3000"
-    enabled = false
-  }
-  #reverse = {
-  #  service = "192.168.88.50:8888"
-  #  enabled = false
-  #}
-  sickchill = {
-    service = "sickchill.servarr.svc"
-    enabled = false
-  }
-  transmission = {
-    service = "192.168.88.52:31091"
-    enabled = false
-  }
+
+
   unifi = {
     #    service = "unifi.unifi.svc:8443"
     service          = "192.168.88.244:8443"
@@ -313,11 +225,7 @@ client_max_body_size 20m;
   unifi-inform = {
     service = "192.168.88.50:8082"
   }
-  dupeguru = {
-    service                 = "dupeguru.dupeguru.svc:5800"
-    enabled                 = false
-    authentication_required = true
-  }
+
 
   immich = {
     #service = "immich-server.immich.svc:2283"
@@ -338,27 +246,9 @@ client_max_body_size 20m;
     #end of working
                 EOT  
   }
-  immicht = {
-    service = "immicht-svc.immicht.svc:2283"
-    enabled = false
-  }
 
-  netdata = {
-    enabled = false
-    service = "netdata-agent.netdata.svc:19999"
-  }
-  screeps = {
-    enabled                = false
-    redirect_to_https_bool = false
-    listen_port_80_bool    = true
-    service                = "screeps-svc.screeps.svc:25565"
-  }
-  minecraft = {
-    enabled                = false
-    redirect_to_https_bool = false
-    listen_port_80_bool    = true
-    service                = "minecraft-svc.minecraft.svc:21025"
-  }
+
+
   stirling = {
     enabled              = false
     service              = "stirling-svc.stirling.svc:8080"
@@ -378,30 +268,17 @@ proxy_set_header Connection "upgrade";
 
                 EOT
   }
-  vulcan = {
-    service = "vulcan.vulcan.svc:80"
-    enabled = false
-  }
 
-  nginx = {
-    enabled = false
-    service = "nginx-svc.nginx.svc"
-  }
+
+
   openmediavault = {
     service = "192.168.88.29"
-    #    service = "192.168.88.42"
   }
   pihole = {
+    enabled     = false
     service = "web.piholenew.svc"
   }
-  jellyfin = {
-    enabled = false
-    service = "jellyfin-svc.jellyfin.svc:8096"
-  }
-  gogs = {
-    enabled = false
-    service = "gogs-svc.gogs.svc:3000"
-  }
+
   synology = {
     enabled = true
     service = "192.168.88.39:5000"
@@ -414,20 +291,6 @@ proxy_set_header Connection "upgrade";
     redirect_to_root_domain = false
   }
 
-  spider = {
-    enabled = false
-    service = "spider-svc.spider.svc:8080"
-  }
-  nextcloud-terraform = {
-    enabled = false
-    service = "nextcloud-web-svc.nextcloud-terraform.svc:80"
-
-  }
-  paper = {
-    enabled = false
-    service = "paper-svc.paper.svc:8000"
-
-  }
   next = {
     enabled     = false
     service     = "next-svc.next.svc"
@@ -451,10 +314,7 @@ proxy_set_header Connection "upgrade";
                         EOT
   }
 
-  bookstack-terraform = {
-    enabled = false
-    service = "bookstack-svc.bookstack-terraform.svc"
-  }
+
   stash = {
     #  enabled              = false
     service = "stash-svc.stash.svc:9999"
@@ -494,35 +354,10 @@ proxy_set_header Connection "upgrade";
                 EOT
 
   }
-  pinchflat = {
-    enabled = false
-    service = "pinchflat-svc.pinchflat.svc:8945"
-  }
-
-  jobspy = {
-    enabled = false
-    service = "jobspy-svc.jobspy.svc:8000"
-  }
-  poste = {
-    enabled              = false
-    service              = "poste-svc.poste.svc:443"
-    proxy_pass_https     = true
-    extra-value-location = <<EOT
-    proxy_set_header Connection "upgrade";
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-    proxy_read_timeout 60000s;
-#working
-proxy_set_header Connection "upgrade";
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_cache_bypass $http_upgrade;
-#end of working
 
 
 
-                EOT
-  }
+
   wikijs = {
     #enabled     = false
     geoip_blocking = false
@@ -533,35 +368,9 @@ client_max_body_size 20m;
                 EOT
   }
 
-  keycloak = {
-    enabled     = false
-    service     = "keycloak-svc.keycloak.svc:8080"
-    extra-value = <<EOT
-
-        set_real_ip_from 0.0.0.0/0;
-        real_ip_header X-Real-IP;
-        real_ip_recursive on;
-                        EOT
-  }
-  oauthn = {
-    enabled = false
-    service = "oauth2-proxy-svc.oauth2-proxy.svc:4180"
-
-    # extra-value = <<EOT
-    # location /oauth2/ {
-    #	proxy_pass http://oauthn_backend;
-    #	proxy_set_header Host $host;
-    #	proxy_set_header X-Real-IP $remote_addr;
-    #	proxy_set_header X-Scheme $scheme;
-    #   }
-    #              EOT
 
 
-  }
-  emailproxy = {
-    enabled = false
-    service = "emailproxy-svc.paper.svc:80"
-  }
+
   tdarr = {
     enabled              = false
     service              = "tdarr-svc.servarr.svc:8265"
@@ -582,19 +391,6 @@ proxy_set_header Connection "upgrade";
                 EOT
 
   }
-  opencloud = {
-    enabled          = false
-    service          = "opencloud-svc.opencloud.svc:9200"
-    proxy_pass_https = true
 
-  }
-  owncloud = {
-    enabled = false
-    service = "owncloud-svc.owncloud.svc:8080"
-  }
-
-  #overleaf = {
-  #  service = "overleaf-svc.overleaf.svc:80"
-  #}
 }
 deny_ip = ["1.2.3.4"]