feat(reverse-proxy): Add Caddy for reverse proxy
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev>
This commit is contained in:
26
roles/reverse_proxy/templates/Caddyfile.j2
Normal file
26
roles/reverse_proxy/templates/Caddyfile.j2
Normal file
@@ -0,0 +1,26 @@
|
||||
{
|
||||
email {{ caddy.admin_email | default('admin@example.com') }}
|
||||
acme_ca {{ caddy.acme_ca | default('https://acme-v02.api.letsencrypt.org/directory') }}
|
||||
}
|
||||
|
||||
{% for service in services %}
|
||||
{{ service.name }}.{{ domain }} {
|
||||
{% for vm in service.vm %}
|
||||
reverse_proxy {{ hostvars[vm].ansible_host }}:{{ service.port }}
|
||||
{% endfor %}
|
||||
log {
|
||||
output file /var/log/caddy/{{ service.name }}.log
|
||||
format json
|
||||
}
|
||||
tls {
|
||||
dns netcup {
|
||||
customer_number {{ vault.netcup.customer_number }}
|
||||
api_key {{ vault.netcup.api_key}}
|
||||
api_password {{ vault.netcup.api_password }}
|
||||
}
|
||||
propagation_timeout 900s
|
||||
propagation_delay 600s
|
||||
resolvers 1.1.1.1
|
||||
}
|
||||
}
|
||||
{% endfor %}
|
||||
Reference in New Issue
Block a user