54 lines
2.3 KiB
YAML
Executable File
54 lines
2.3 KiB
YAML
Executable File
#!/usr/bin/env ansible-playbook
|
|
---
|
|
# Deploy reverse proxy
|
|
# Frontdaur is the backup of bakdaur (keepalived)
|
|
- hosts: bakdaur.adm.crans.org,frontdaur.adm.crans.org
|
|
vars:
|
|
certbot:
|
|
dns_rfc2136_name: certbot_challenge.
|
|
dns_rfc2136_secret: "{{ vault_certbot_dns_secret }}"
|
|
mail: root@crans.org
|
|
certname: crans.org
|
|
domains: "crans.org, *.crans.org, crans.fr, *.crans.fr, crans.eu, *.crans.eu"
|
|
bind:
|
|
masters: "{{ lookup('re2oapi', 'get_role', 'dns-authoritary-master')[0] }}"
|
|
nginx:
|
|
ssl:
|
|
cert: /etc/letsencrypt/live/crans.org/fullchain.pem
|
|
cert_key: /etc/letsencrypt/live/crans.org/privkey.pem
|
|
trusted_cert: /etc/letsencrypt/live/crans.org/chain.pem
|
|
|
|
redirect_dnames:
|
|
- crans.eu
|
|
- crans.fr
|
|
|
|
reverseproxy_sites:
|
|
# Services web Crans
|
|
- {from: lutim.crans.org, to: 10.231.136.69}
|
|
- {from: zero.crans.org, to: 10.231.136.76}
|
|
- {from: pad.crans.org, to: "10.231.136.76:9001"}
|
|
- {from: ethercalc.crans.org, to: "10.231.136.203:8000"}
|
|
- {from: mediadrop.crans.org, to: 10.231.136.106}
|
|
- {from: videos.crans.org, to: 10.231.136.106}
|
|
- {from: video.crans.org, to: 10.231.136.106}
|
|
- {from: roundcube.crans.org, to: 10.231.136.105}
|
|
- {from: phabricator.crans.org, to: 10.231.136.123}
|
|
- {from: trackerusercontent.crans.org, to: 10.231.136.123}
|
|
- {from: cas.crans.org, to: 10.231.136.18}
|
|
- {from: auth.crans.org, to: 10.231.136.18}
|
|
- {from: login.crans.org, to: 10.231.136.18}
|
|
- {from: webmail.crans.org, to: 10.231.136.107}
|
|
- {from: horde.crans.org, to: 10.231.136.107}
|
|
- {from: owncloud.crans.org, to: 10.231.136.26}
|
|
- {from: ftps.crans.org, to: 10.231.136.98}
|
|
- {from: wiki.crans.org, to: 10.231.136.204}
|
|
- {from: calendrier.crans.org, to: 10.231.136.204}
|
|
- {from: www.crans.org, to: 10.231.136.46}
|
|
- {from: doc.crans.org, to: 10.231.136.46}
|
|
- {from: limesurvey.crans.org, to: 10.231.136.253}
|
|
- {from: perso.crans.org, to: 10.231.136.1}
|
|
- {from: webnews.crans.org, to: 10.231.136.63}
|
|
- {from: re2o.crans.org, to: 10.231.136.9}
|
|
- {from: intranet.crans.org, to: 10.231.136.9}
|
|
- {from: autoconfig.crans.org, to: 10.231.136.46}
|