CCCHH/ansible-infra
CCCHH/ansible-infra
4
2
Fork 1
Code Issues 4 Pull requests 1 Wiki Activity Actions

Migrate Wiki from ThinkCCCluster to Chaosknoten

Browse source 
Also do the redirect for DNS cache stuff like with aes.
This commit is contained in:
June 2023-08-11 01:59:34 +02:00 • committed by julian
commit d16da59fd7
8 changed files with 12 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

1
playbooks/files/chaosknoten/configs/public-reverse-proxy/nginx/acme_challenge.conf
View file

@ -4,6 +4,7 @@ map $host $upstream_acme_challenge_host {
id.hamburg.ccc.de 172.31.17.144:31820;
keycloak-admin.hamburg.ccc.de 172.31.17.144:31820;
aes.ccchh.net 172.31.17.145:31820;
wiki.ccchh.net 172.31.17.146:31820;
default "";
}

1
playbooks/files/chaosknoten/configs/public-reverse-proxy/nginx/nginx.conf
View file

@ -23,6 +23,7 @@ stream {
id.hamburg.ccc.de 172.31.17.144:8443;
keycloak-admin.hamburg.ccc.de 172.31.17.144:8444;
aes.ccchh.net 172.31.17.145:8443;
wiki.ccchh.net 172.31.17.146:8443;
}
server {

2
playbooks/files/z9/configs/wiki/nginx/wiki.ccchh.net.conf → playbooks/files/chaosknoten/configs/wiki/nginx/wiki.ccchh.net.conf
View file

@ -7,7 +7,7 @@ server {
# $remote_port to the client address and client port, when using proxy
# protocol.
# First set our proxy protocol proxy as trusted.
set_real_ip_from 10.31.206.11;
set_real_ip_from 172.31.17.140;
# Then tell the realip_module to get the addreses from the proxy protocol
# header.
real_ip_header proxy_protocol;

1
playbooks/files/z9/configs/public-reverse-proxy/nginx/acme_challenge.conf
View file

@ -6,7 +6,6 @@ map $host $upstream_acme_challenge_host {
thinkcccore1.ccchh.net 10.31.242.4;
thinkcccore2.ccchh.net 10.31.242.5;
thinkcccore3.ccchh.net 10.31.242.6;
wiki.ccchh.net 10.31.206.13:31820;
zigbee2mqtt.ccchh.net 10.31.208.25:31820;
esphome.ccchh.net 10.31.208.24:31820;
proxmox-backup-server.ccchh.net 10.31.208.28;

2
playbooks/files/z9/configs/public-reverse-proxy/nginx/nginx.conf
View file

@ -17,11 +17,11 @@ events {
stream {
map $ssl_preread_server_name $first_jump {
aes.ccchh.net 212.12.48.125:443;
wiki.ccchh.net 212.12.48.125:443;
default 127.0.0.1:9443;
}
map $ssl_preread_server_name $address {
wiki.ccchh.net 10.31.206.13:8443;
default 127.0.0.1:8443;
}