gaugendre/ansible
1
0
Fork 0
mirror of https://github.com/Crocmagnon/ansible.git synced 2024-11-22 07:18:02 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

reorganize ports

Browse source
This commit is contained in:
Gabriel Augendre 2024-10-10 22:46:11 +02:00
parent b3fb71f454
commit 8144879308
4 changed files with 75 additions and 53 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

120
templates/Caddyfile.j2 → files/Caddyfile
View file

@ -26,6 +26,26 @@
# PUBLIC SERVICES # PUBLIC SERVICES
######################################################### #########################################################
## Static config
#########################################################
static.augendre.info {
import common_headers
header * Cache-Control "max-age=300"
file_server * {
root /mnt/data/caddy/static
hide .*
}
}
augendre.info {
import common_headers
respond * 200
}
## Reverse proxies (ports 8000-8999)
#########################################################
charasheet.augendre.info { charasheet.augendre.info {
import common_headers import common_headers
route { route {
@ -46,20 +66,6 @@ checkout.augendre.info {
} }
} }
static.augendre.info {
import common_headers
header * Cache-Control "max-age=300"
file_server * {
root /mnt/data/caddy/static
hide .*
}
}
gc.gabnotes.org, gc.augendre.info, static.gc.augendre.info, voyages.gc.coccomagnard.fr {
import common_headers
reverse_proxy localhost:8081
}
cloud.augendre.info { cloud.augendre.info {
import common_headers import common_headers
route /push/* { route /push/* {
@ -73,9 +79,9 @@ cloud.augendre.info {
reverse_proxy localhost:8003 reverse_proxy localhost:8003
} }
tcl.augendre.info { gc.gabnotes.org, gc.augendre.info, static.gc.augendre.info, voyages.gc.coccomagnard.fr {
import common_headers import common_headers
reverse_proxy localhost:8888 reverse_proxy localhost:8005
} }
git.augendre.info { git.augendre.info {
@ -108,6 +114,24 @@ bin.augendre.info, paste.augendre.info {
reverse_proxy localhost:8010 reverse_proxy localhost:8010
} }
g4b.ovh {
import common_headers
reverse_proxy localhost:8011
}
manuels.augendre.info, fournitures.augendre.info {
import common_headers
reverse_proxy localhost:8012
}
tcl.augendre.info {
import common_headers
reverse_proxy localhost:8013
}
## Ghost blogs (ports >=2368)
#########################################################
gabnotes.org { gabnotes.org {
import common_headers import common_headers
header * Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://cdn.jsdelivr.net https://code.jquery.com https://*.gabnotes.org https://unpkg.com https://cdnjs.cloudflare.com; img-src 'self' https:; connect-src 'self' https://*.augendre.info https://unpkg.com https://*.gabnotes.org https://api.codapi.org; frame-ancestors https://*.augendre.info; base-uri 'self'; form-action 'self';" header * Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://cdn.jsdelivr.net https://code.jquery.com https://*.gabnotes.org https://unpkg.com https://cdnjs.cloudflare.com; img-src 'self' https:; connect-src 'self' https://*.augendre.info https://unpkg.com https://*.gabnotes.org https://api.codapi.org; frame-ancestors https://*.augendre.info; base-uri 'self'; form-action 'self';"
@ -133,20 +157,12 @@ voyages.coccomagnard.fr, voyages.augendre.info {
reverse_proxy localhost:2370 reverse_proxy localhost:2370
} }
g4b.ovh { #########################################################
import common_headers # PROXY TO EXTERNAL SERVICES
reverse_proxy localhost:8011 #########################################################
}
augendre.info { ## At home
import common_headers #########################################################
respond * 200
}
manuels.augendre.info, fournitures.augendre.info {
import common_headers
reverse_proxy localhost:8012
}
hass.augendre.info { hass.augendre.info {
import common_headers import common_headers
@ -154,8 +170,12 @@ hass.augendre.info {
reverse_proxy http://192.168.0.9:8123 reverse_proxy http://192.168.0.9:8123
} }
######################################################### prusalink.augendre.info {
# PROXY TO EXTERNAL SERVICES import internal
reverse_proxy http://192.168.0.12
}
## Outside
######################################################### #########################################################
autoconfig.augendre.info { autoconfig.augendre.info {
@ -166,10 +186,9 @@ autoconfig.augendre.info {
######################################################### #########################################################
# INTERNAL SERVICES # INTERNAL SERVICES
######################################################### #########################################################
prusalink.augendre.info {
import internal ## Static config
reverse_proxy http://192.168.0.12 #########################################################
}
internal-static.augendre.info { internal-static.augendre.info {
import common_headers import common_headers
@ -182,10 +201,13 @@ internal-static.augendre.info {
} }
} }
## Reverse proxies (ports 9000-9999)
#########################################################
portainer.augendre.info { portainer.augendre.info {
import common_headers import common_headers
import internal import internal
reverse_proxy https://localhost:8013 { reverse_proxy https://localhost:9001 {
transport http { transport http {
tls_insecure_skip_verify tls_insecure_skip_verify
} }
@ -195,52 +217,52 @@ portainer.augendre.info {
code.augendre.info { code.augendre.info {
import common_headers import common_headers
import internal import internal
reverse_proxy localhost:8014 reverse_proxy localhost:9002
} }
plex.augendre.info {
import common_headers
import internal
reverse_proxy localhost:9003
}
transmission.augendre.info { transmission.augendre.info {
import common_headers import common_headers
import internal import internal
reverse_proxy localhost:8015 reverse_proxy localhost:9004
} }
sonarr.augendre.info { sonarr.augendre.info {
import common_headers import common_headers
import internal import internal
reverse_proxy localhost:8016 reverse_proxy localhost:9005
} }
prowlarr.augendre.info { prowlarr.augendre.info {
import common_headers import common_headers
import internal import internal
reverse_proxy localhost:8017 reverse_proxy localhost:9006
} }
radarr.augendre.info { radarr.augendre.info {
import common_headers import common_headers
import internal import internal
reverse_proxy localhost:8018 reverse_proxy localhost:9007
}
plex.augendre.info {
import common_headers
import internal
reverse_proxy localhost:8019
} }
test.augendre.info { test.augendre.info {
import common_headers import common_headers
import internal import internal
reverse_proxy localhost:8020 reverse_proxy localhost:9008
} }
nextcloud-kibana.augendre.info { nextcloud-kibana.augendre.info {
import common_headers import common_headers
import internal import internal
reverse_proxy localhost:8005 reverse_proxy localhost:9009
} }
display.augendre.info { display.augendre.info {
import common_headers import common_headers
import internal import internal
header Content-Security-Policy "default-src 'self' https://*.augendre.info; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; frame-ancestors https://*.augendre.info; connect-src 'self' https://*.augendre.info https://download.data.grandlyon.com" header Content-Security-Policy "default-src 'self' https://*.augendre.info; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; frame-ancestors https://*.augendre.info; connect-src 'self' https://*.augendre.info https://download.data.grandlyon.com"
reverse_proxy localhost:8021 reverse_proxy localhost:9010
} }
######################################################### #########################################################

4
playbooks/apps/caddy.yaml
View file

@ -3,8 +3,8 @@
become: true become: true
tasks: tasks:
- name: write Caddyfile - name: write Caddyfile
template: copy:
src: ../../templates/Caddyfile.j2 src: ../../files/Caddyfile
dest: /etc/caddy/Caddyfile dest: /etc/caddy/Caddyfile
notify: notify:
- reload caddy - reload caddy

2
templates/goatcounter.service.j2
View file

@ -3,7 +3,7 @@ Description=Goatcounter
After=network.target After=network.target
[Service] [Service]
ExecStart={{base_dir}}/goatcounter serve -listen *:8081 -tls http -smtp smtps://goatcounter%%40mg.augendre.info:{{gc_mailgun_api_key}}@smtp.mailgun.org:587 -email-from goatcounter@mg.augendre.info -automigrate -db sqlite+{{base_dir}}/db/goatcounter.sqlite3 ExecStart={{base_dir}}/goatcounter serve -listen *:8005 -tls http -smtp smtps://goatcounter%%40mg.augendre.info:{{gc_mailgun_api_key}}@smtp.mailgun.org:587 -email-from goatcounter@mg.augendre.info -automigrate -db sqlite+{{base_dir}}/db/goatcounter.sqlite3
Type=simple Type=simple
Restart=always Restart=always
User=gaugendre User=gaugendre

2
templates/lyon-transports.service.j2
View file

@ -3,7 +3,7 @@ Description=Lyon transports API
After=network.target After=network.target
[Service] [Service]
ExecStart=/mnt/data/lyon-transports/lyon-transports-linux-amd64 --host 0.0.0.0 -u {{ lyon_transports_username }} -p {{ lyon_transports_password }} --cors-allowed-origin https://display.augendre.info ExecStart=/mnt/data/lyon-transports/lyon-transports-linux-amd64 --host 0.0.0.0 --port 8013 -u {{ lyon_transports_username }} -p {{ lyon_transports_password }} --cors-allowed-origin https://display.augendre.info
Type=simple Type=simple
Restart=always Restart=always
User=gaugendre User=gaugendre