tudattr
/
ansible
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Removed unused site-confs and added stub template 

Signed-off-by: TuDatTr <tuan-dat.tran@tudattr.dev>
pull/1/head
TuDatTr 2023-06-12 22:16:28 +02:00
parent 8b1acb4eb7
commit 6c8a33e730
12 changed files with 184 additions and 141 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
roles/docker/templates/mii/swag/site-confs/code-server.subdomain.conf
View File

@ -1,22 +0,0 @@
## Version 2023/02/05
# make sure that your code-server container is named code-server
# make sure that your dns has a cname set for code-server
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name {{ code_host }}.{{ remote_domain }};
include /config/nginx/ssl.conf;
client_max_body_size 0;
location / {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
proxy_pass http://{{aya01_ip}}:{{ code_port }};
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}

20
roles/docker/templates/mii/swag/site-confs/homeassistant.subdomain.conf
View File

@ -1,20 +0,0 @@
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name {{ hass_host }}.{{ backup_domain }};
include /config/nginx/ssl.conf;
client_max_body_size 0;
location / {
include /config/nginx/resolver.conf;
proxy_pass http://{{ hass_host }}.{{ pi_host }}.{{ local_domain }};
}
location ~ ^/(api|local|media)/ {
include /config/nginx/resolver.conf;
proxy_pass http://{{ hass_host }}.{{ pi_host }}.{{ local_domain }};
}
}

84
roles/docker/templates/mii/swag/site-confs/qbittorrent.subdomain.conf
View File

@ -1,84 +0,0 @@
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name {{ qbit_host }}.{{ backup_domain }};
include /config/nginx/ssl.conf;
client_max_body_size 0;
location / {
include /config/nginx/resolver.conf;
proxy_pass http://{{ qbit_host }}.{{ aya01_host }}.{{ local_domain }};
proxy_set_header Referer '';
proxy_set_header X-Forwarded-Host $host;
}
location ~ (/qbittorrent)?/api {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
proxy_pass http://{{ qbit_host }}.{{ aya01_host }}.{{ local_domain }};
rewrite /qbittorrent(.*) $1 break;
proxy_set_header Referer '';
proxy_set_header X-Forwarded-Host $host;
}
location ~ (/qbittorrent)?/command {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
proxy_pass http://{{ qbit_host }}.{{ aya01_host }}.{{ local_domain }};
rewrite /qbittorrent(.*) $1 break;
proxy_set_header Referer '';
proxy_set_header X-Forwarded-Host $host;
}
location ~ (/qbittorrent)?/query {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
proxy_pass http://{{ qbit_host }}.{{ aya01_host }}.{{ local_domain }};
rewrite /qbittorrent(.*) $1 break;
proxy_set_header Referer '';
proxy_set_header X-Forwarded-Host $host;
}
location ~ (/qbittorrent)?/login {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
proxy_pass http://{{ qbit_host }}.{{ aya01_host }}.{{ local_domain }};
rewrite /qbittorrent(.*) $1 break;
proxy_set_header Referer '';
proxy_set_header X-Forwarded-Host $host;
}
location ~ (/qbittorrent)?/sync {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
proxy_pass http://{{ qbit_host }}.{{ aya01_host }}.{{ local_domain }};
rewrite /qbittorrent(.*) $1 break;
proxy_set_header Referer '';
proxy_set_header X-Forwarded-Host $host;
}
location ~ (/qbittorrent)?/scripts {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
proxy_pass http://{{ qbit_host }}.{{ aya01_host }}.{{ local_domain }};
rewrite /qbittorrent(.*) $1 break;
proxy_set_header Referer '';
proxy_set_header X-Forwarded-Host $host;
}
}

20
roles/docker/templates/mii/swag/site-confs/stub.subfolder.conf Normal file
View File

@ -0,0 +1,20 @@
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name {{ stub_host }}.{{ local_domain }};
access_log off;
allow 192.168.20.12;
deny all;
include /config/nginx/ssl.conf;
client_max_body_size 0;
location /stub_status {
include /config/nginx/resolver.conf;
stub_status on;
proxy_pass http://{{ stub_host }}.{{ aya01_host }}.{{ local_domain }};
}
}

15
roles/docker/templates/mii/swag/site-confs/zoneminder.subdomain.conf
View File

@ -1,15 +0,0 @@
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name {{ zoneminder_host }}.{{ backup_domain }};
include /config/nginx/ssl.conf;
client_max_body_size 0;
location / {
include /config/nginx/resolver.conf;
proxy_pass http://{{ zoneminder_host }}.{{ aya01_host }}.{{ local_domain }};
}
}

31
roles/swag/tasks/docker.yml Normal file
View File

@ -0,0 +1,31 @@
---
- name: Create swag container
docker_container:
image: lscr.io/linuxserver/swag:latest
name: "{{ swag_host }}"
restart_policy: "unless-stopped"
networks:
- name: "{{ docker_net_name }}"
ipv4_address: 172.16.69.2
aliases: "{{ swag_host }}"
dns_servers:
- "{{ aya01_ip }}"
- "{{ pi_ip }}"
- 1.1.1.1
capabilities:
- NET_ADMIN
env:
PUID: "{{ puid }}"
PGID: "{{ pgid }}"
TZ: "{{ timezone }}"
URL: "{{ remote_domain }}"
VALIDATION: "http"
SUBDOMAINS: "{{ swag_subdomains }}"
DNSPLUGIN: "cloudflare"
EMAIL: "{{ swag_email }}"
ONLY_SUBDOMAINS: "false"
volumes:
- "{{ swag_config }}:/config"
ports:
- "{{ swag_port }}:443"
- 80:80 #optional

3
roles/swag/tasks/main.yml Normal file
View File

@ -0,0 +1,3 @@
---
- include_tasks: setup.yml
- include_tasks: docker.yml

20
roles/swag/tasks/setup.yml Normal file
View File

@ -0,0 +1,20 @@
---
- name: Create swag-config directory
file:
path: "{{ item }}"
owner: "{{ puid }}"
group: "{{ pgid }}"
state: directory
loop:
- "{{ swag_config }}"
- name: Copy site-confs
template:
owner: "{{ puid }}"
group: "{{ pgid }}"
src: "{{ item }}"
dest: "{{ swag_remote_site_confs }}"
mode: '664'
loop: "{{ swag_site_confs }}"
become: true

29
roles/swag/templates/grafana.subdomain.conf Normal file
View File

@ -0,0 +1,29 @@
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name {{ grafana_host }}.{{ remote_domain }};
include /config/nginx/ssl.conf;
client_max_body_size 0;
location / {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app {{ aya01_ip }};
set $upstream_port 3000;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
}
location ~ (/grafana)?/api {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app {{ aya01_ip }};
set $upstream_port 3000;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
}
}

30
roles/swag/templates/plex.subdomain.conf Normal file
View File

@ -0,0 +1,30 @@
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name {{ plex_host }}.{{ remote_domain }};
include /config/nginx/ssl.conf;
client_max_body_size 0;
proxy_redirect off;
proxy_buffering off;
location / {
include /config/nginx/resolver.conf;
proxy_pass http://{{ plex_host }}.{{ aya01_host }}.{{ local_domain }};
proxy_set_header X-Plex-Client-Identifier $http_x_plex_client_identifier;
proxy_set_header X-Plex-Device $http_x_plex_device;
proxy_set_header X-Plex-Device-Name $http_x_plex_device_name;
proxy_set_header X-Plex-Platform $http_x_plex_platform;
proxy_set_header X-Plex-Platform-Version $http_x_plex_platform_version;
proxy_set_header X-Plex-Product $http_x_plex_product;
proxy_set_header X-Plex-Token $http_x_plex_token;
proxy_set_header X-Plex-Version $http_x_plex_version;
proxy_set_header X-Plex-Nocache $http_x_plex_nocache;
proxy_set_header X-Plex-Provides $http_x_plex_provides;
proxy_set_header X-Plex-Device-Vendor $http_x_plex_device_vendor;
proxy_set_header X-Plex-Model $http_x_plex_model;
}
}

34
roles/swag/templates/tautulli.subdomain.conf Normal file
View File

@ -0,0 +1,34 @@
## Version 2023/02/05
# make sure that your tautulli container is named tautulli
# make sure that your dns has a cname set for tautulli
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name {{ tautulli_host }}.{{ remote_domain }};
include /config/nginx/ssl.conf;
client_max_body_size 0;
location / {
include /config/nginx/resolver.conf;
proxy_pass http://{{ tautulli_host }}.{{ aya01_host }}.{{ local_domain }};
}
location ~ (/tautulli)?/api {
include /config/nginx/resolver.conf;
proxy_pass http://{{ tautulli_host }}.{{ aya01_host }}.{{ local_domain }};
}
location ~ (/tautulli)?/newsletter {
include /config/nginx/resolver.conf;
proxy_pass http://{{ tautulli_host }}.{{ aya01_host }}.{{ local_domain }};
}
location ~ (/tautulli)?/image {
include /config/nginx/resolver.conf;
proxy_pass http://{{ tautulli_host }}.{{ aya01_host }}.{{ local_domain }};
}
}

17
roles/swag/templates/uptime-kuma.subdomain.conf Normal file
View File

@ -0,0 +1,17 @@
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name {{ kuma_host }}.{{ remote_domain }};
include /config/nginx/ssl.conf;
client_max_body_size 0;
location / {
include /config/nginx/resolver.conf;
proxy_pass http://{{ kuma_host }}.{{ aya01_host }}.{{ local_domain }};
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}