From 7177ace2285c4e99483edd02b006ca90588e6133 Mon Sep 17 00:00:00 2001 From: L3D Date: Fri, 12 Jan 2024 15:15:16 +0100 Subject: [PATCH] Create host i.l3d.ch --- host_vars/services.l3d.space/vars.yml | 2 ++ templates/files/nginx/sites/i.l3d.ch_tls.conf | 20 +++++++++++++++++++ .../files/nginx/sites/www.i.l3d.ch_tls.conf | 14 +++++++++++++ 3 files changed, 36 insertions(+) create mode 100644 templates/files/nginx/sites/i.l3d.ch_tls.conf create mode 100644 templates/files/nginx/sites/www.i.l3d.ch_tls.conf diff --git a/host_vars/services.l3d.space/vars.yml b/host_vars/services.l3d.space/vars.yml index 2b7bc7b..5c5aa11 100644 --- a/host_vars/services.l3d.space/vars.yml +++ b/host_vars/services.l3d.space/vars.yml @@ -6,6 +6,8 @@ nginx_sites: - name: 'etebase.l3d.ch' - name: 'grafana.l3d.ch' - name: 'www.grafana.l3d.ch' + - name: 'i.l3d.ch' + - name: 'www.i.l3d.ch' - name: 'node-exporter.services.l3d.space' - name: 'nginx-exporter.services.l3d.space' diff --git a/templates/files/nginx/sites/i.l3d.ch_tls.conf b/templates/files/nginx/sites/i.l3d.ch_tls.conf new file mode 100644 index 0000000..61e691c --- /dev/null +++ b/templates/files/nginx/sites/i.l3d.ch_tls.conf @@ -0,0 +1,20 @@ +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name i.l3d.ch; + + include snippets/tls_parameters_{{ site.name }}.snippet.conf; + include snippets/tls_certificate_{{ site.name }}.snippet.conf; + include snippets/logging_{{ site.name }}.snippet.conf; + + location / { + proxy_pass http://localhost:7745; + client_max_body_size 10M; + proxy_read_timeout 1600; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +} diff --git a/templates/files/nginx/sites/www.i.l3d.ch_tls.conf b/templates/files/nginx/sites/www.i.l3d.ch_tls.conf new file mode 100644 index 0000000..f0d4d34 --- /dev/null +++ b/templates/files/nginx/sites/www.i.l3d.ch_tls.conf @@ -0,0 +1,14 @@ +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name www.i.l3d.ch; + + include snippets/tls_parameters_{{ site.name }}.snippet.conf; + include snippets/tls_certificate_{{ site.name }}.snippet.conf; + include snippets/logging_{{ site.name }}.snippet.conf; + + location / { + return 308 https://i.l3d.ch/; + } +}