pi-ux-ce/Terraform_kube
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

big cleanup

Browse Source
This commit is contained in:
pierre.geeraert
2026-10-12 18:34:25 +01:00
parent 7f9bc2019d
commit 661ee11d6d
1 changed files with 19 additions and 223 deletions
Download Patch File Download Diff File Expand all files Collapse all files
reverse-proxy/variables.auto.tfvars
+19 -223
View File
@@ -1,12 +1,5 @@
nginx_sites = { nginx_sites = {
bitwarden = { bitwarden = {
#service = "nginx.bitwarden.svc:8080"
#extra-value-location = <<EOT
#proxy_set_header Host $host;
#proxy_set_header X-Real-IP $remote_addr;
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#proxy_set_header Proxy "";
# EOT
service = "bitwarden-nginx-svc.bitwarden.svc:8080" service = "bitwarden-nginx-svc.bitwarden.svc:8080"
http2_bool = true http2_bool = true
redirect_to_root_domain = false redirect_to_root_domain = false
@@ -14,7 +7,6 @@ nginx_sites = {
bookstack = { bookstack = {
enabled = false enabled = false
# service = "webserver.bookstack.svc"
service = "bookstack-svc.bookstack.svc" service = "bookstack-svc.bookstack.svc"
proxy_cache = false proxy_cache = false
} }
@@ -128,75 +120,19 @@ nginx_sites = {
} }
echo = { echo = {
enabled = true enabled = true
# service = "echo-server.echo-server.svc:80"
service = "echo-svc.echo.svc" service = "echo-svc.echo.svc"
docker_service = "echo" docker_service = "echo"
proxy_cache = true proxy_cache = true
http2_bool = true http2_bool = true
#extra-value-location = <<EOT
# auth_request /oauth2/auth;
# error_page 401 = @oauth2_signin;
# proxy_set_header X-Auth-Request-Redirect $request_uri;
# EOT
#extra-value = <<EOT
# location = /oauth2/auth {
# internal;
#proxy_pass http://oauthn_backend;
## proxy_pass https://oauthn.tryton.geeraert.eu/oauth2/auth;
# proxy_pass_request_body off;
# proxy_set_header Content-Length "";
# proxy_set_header X-Original-URI $request_uri;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header X-Scheme $scheme;
#}
#location @oauth2_signin {
# return 302 https://$host/oauth2/start?rd=https://$host$request_uri;
# #return 302 https://oauthn.tryton.geeraert.eu/oauth2/start?rd=https://$host$request_uri;
#}
#location /oauth2/ {
#proxy_pass http://oauthn_backend;
#proxy_set_header Host $host;
#proxy_set_header X-Real-IP $remote_addr;
#proxy_set_header X-Scheme $scheme;
#proxy_set_header X-Auth-Request-Redirect $request_uri;
#}
# EOT
}
gitlab = {
service = "webserver.gitlab.svc:443"
proxy_cache = true
extra_value_bool = true
enabled = false
extra-value = <<EOT
client_max_body_size 20m;
proxy_request_buffering off;
EOT
http2_bool = true
proxy_pass_https = true
} }
sonarr = { sonarr = {
service = "sonarr-svc.servarr.svc:8989" service = "sonarr-svc.servarr.svc:8989"
geoip_allow = ["FR", "GB", "NL"] geoip_allow = ["FR", "GB", "NL"]
} }
keycloak = {
service = "keycloak.keycloak.svc:8080"
enabled = false
extra-value = <<EOT
set_real_ip_from 0.0.0.0/0;
real_ip_header X-Real-IP;
real_ip_recursive on;
EOT
}
nextcloud = { nextcloud = {
redirect_to_root_domain = false redirect_to_root_domain = false
service = "webserver.nextcloud.svc" service = "webserver.nextcloud.svc"
@@ -224,13 +160,12 @@ client_max_body_size 20m;
router = { router = {
enabled = false
service = "192.168.88.1" service = "192.168.88.1"
authentication_required = true authentication_required = true
} }
homeassistant = {
enabled = false
service = "homeassistant-svc.homeassistant.svc:8123"
}
octoprint = { octoprint = {
service = "192.168.0.32:5000" service = "192.168.0.32:5000"
extra-value-location = <<EOT extra-value-location = <<EOT
@@ -253,11 +188,7 @@ client_max_body_size 20m;
enabled = false enabled = false
} }
opentrashmail = {
# service = "opentrashmail.opentrashmail.svc"
service = "1.1.1.1"
enabled = false
}
paperless = { paperless = {
#service = "webserver.paperless.svc:8000" #service = "webserver.paperless.svc:8000"
service = "paperless-svc.paperless.svc:8000" service = "paperless-svc.paperless.svc:8000"
@@ -266,18 +197,13 @@ client_max_body_size 20m;
service = "172.16.0.60:8081" service = "172.16.0.60:8081"
enabled = false enabled = false
} }
portainer = {
service = "portainer.portainer.svc"
}
prowlarr = { prowlarr = {
service = "prowlarr-svc.servarr.svc:9696" service = "prowlarr-svc.servarr.svc:9696"
geoip_allow = ["FR", "GB", "NL"] geoip_allow = ["FR", "GB", "NL"]
} }
proxmox = {
service = "192.168.6.2:8006"
enabled = false
}
qbittorrent = { qbittorrent = {
#enabled = false #enabled = false
service = "qbittorrent-svc.servarr.svc:8080" service = "qbittorrent-svc.servarr.svc:8080"
@@ -289,22 +215,8 @@ client_max_body_size 20m;
geoip_allow = ["FR", "GB", "NL"] geoip_allow = ["FR", "GB", "NL"]
} }
recommendarr = {
service = "recommendarr-svc.servarr.svc:3000"
enabled = false
}
#reverse = {
# service = "192.168.88.50:8888"
# enabled = false
#}
sickchill = {
service = "sickchill.servarr.svc"
enabled = false
}
transmission = {
service = "192.168.88.52:31091"
enabled = false
}
unifi = { unifi = {
# service = "unifi.unifi.svc:8443" # service = "unifi.unifi.svc:8443"
service = "192.168.88.244:8443" service = "192.168.88.244:8443"
@@ -313,11 +225,7 @@ client_max_body_size 20m;
unifi-inform = { unifi-inform = {
service = "192.168.88.50:8082" service = "192.168.88.50:8082"
} }
dupeguru = {
service = "dupeguru.dupeguru.svc:5800"
enabled = false
authentication_required = true
}
immich = { immich = {
#service = "immich-server.immich.svc:2283" #service = "immich-server.immich.svc:2283"
@@ -338,27 +246,9 @@ client_max_body_size 20m;
#end of working #end of working
EOT EOT
} }
immicht = {
service = "immicht-svc.immicht.svc:2283"
enabled = false
}
netdata = {
enabled = false
service = "netdata-agent.netdata.svc:19999"
}
screeps = {
enabled = false
redirect_to_https_bool = false
listen_port_80_bool = true
service = "screeps-svc.screeps.svc:25565"
}
minecraft = {
enabled = false
redirect_to_https_bool = false
listen_port_80_bool = true
service = "minecraft-svc.minecraft.svc:21025"
}
stirling = { stirling = {
enabled = false enabled = false
service = "stirling-svc.stirling.svc:8080" service = "stirling-svc.stirling.svc:8080"
@@ -378,30 +268,17 @@ proxy_set_header Connection "upgrade";
EOT EOT
} }
vulcan = {
service = "vulcan.vulcan.svc:80"
enabled = false
}
nginx = {
enabled = false
service = "nginx-svc.nginx.svc"
}
openmediavault = { openmediavault = {
service = "192.168.88.29" service = "192.168.88.29"
# service = "192.168.88.42"
} }
pihole = { pihole = {
enabled = false
service = "web.piholenew.svc" service = "web.piholenew.svc"
} }
jellyfin = {
enabled = false
service = "jellyfin-svc.jellyfin.svc:8096"
}
gogs = {
enabled = false
service = "gogs-svc.gogs.svc:3000"
}
synology = { synology = {
enabled = true enabled = true
service = "192.168.88.39:5000" service = "192.168.88.39:5000"
@@ -414,20 +291,6 @@ proxy_set_header Connection "upgrade";
redirect_to_root_domain = false redirect_to_root_domain = false
} }
spider = {
enabled = false
service = "spider-svc.spider.svc:8080"
}
nextcloud-terraform = {
enabled = false
service = "nextcloud-web-svc.nextcloud-terraform.svc:80"
}
paper = {
enabled = false
service = "paper-svc.paper.svc:8000"
}
next = { next = {
enabled = false enabled = false
service = "next-svc.next.svc" service = "next-svc.next.svc"
@@ -451,10 +314,7 @@ proxy_set_header Connection "upgrade";
EOT EOT
} }
bookstack-terraform = {
enabled = false
service = "bookstack-svc.bookstack-terraform.svc"
}
stash = { stash = {
# enabled = false # enabled = false
service = "stash-svc.stash.svc:9999" service = "stash-svc.stash.svc:9999"
@@ -494,35 +354,10 @@ proxy_set_header Connection "upgrade";
EOT EOT
} }
pinchflat = {
enabled = false
service = "pinchflat-svc.pinchflat.svc:8945"
}
jobspy = {
enabled = false
service = "jobspy-svc.jobspy.svc:8000"
}
poste = {
enabled = false
service = "poste-svc.poste.svc:443"
proxy_pass_https = true
extra-value-location = <<EOT
proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 60000s;
#working
proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
proxy_cache_bypass $http_upgrade;
#end of working
EOT
}
wikijs = { wikijs = {
#enabled = false #enabled = false
geoip_blocking = false geoip_blocking = false
@@ -533,35 +368,9 @@ client_max_body_size 20m;
EOT EOT
} }
keycloak = {
enabled = false
service = "keycloak-svc.keycloak.svc:8080"
extra-value = <<EOT
set_real_ip_from 0.0.0.0/0;
real_ip_header X-Real-IP;
real_ip_recursive on;
EOT
}
oauthn = {
enabled = false
service = "oauth2-proxy-svc.oauth2-proxy.svc:4180"
# extra-value = <<EOT
# location /oauth2/ {
# proxy_pass http://oauthn_backend;
# proxy_set_header Host $host;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header X-Scheme $scheme;
# }
# EOT
}
emailproxy = {
enabled = false
service = "emailproxy-svc.paper.svc:80"
}
tdarr = { tdarr = {
enabled = false enabled = false
service = "tdarr-svc.servarr.svc:8265" service = "tdarr-svc.servarr.svc:8265"
@@ -582,19 +391,6 @@ proxy_set_header Connection "upgrade";
EOT EOT
} }
opencloud = {
enabled = false
service = "opencloud-svc.opencloud.svc:9200"
proxy_pass_https = true
}
owncloud = {
enabled = false
service = "owncloud-svc.owncloud.svc:8080"
}
#overleaf = {
# service = "overleaf-svc.overleaf.svc:80"
#}
} }
deny_ip = ["1.2.3.4"] deny_ip = ["1.2.3.4"]