defaults/main/proxy_site_defs.yml

@@ -39,12 +39,12 @@
 
 
   proxy_site_ssl_directory           : /etc/nginx/ssl
-  proxy_site_ssl_certificate         : "{{ proxy_site_ssl_directory }}/thezengarden.net/fullchain27.pem"
-  proxy_site_ssl_certificate_key     : "{{ proxy_site_ssl_directory }}/thezengarden.net/privkey27.pem"
-  proxy_site_ssl_certificate_ch      : "{{ proxy_site_ssl_directory }}/chris-hammer.com/fullchain16.pem"
-  proxy_site_ssl_certificate_key_ch  : "{{ proxy_site_ssl_directory }}/chris-hammer.com/privkey16.pem"
-  proxy_site_ssl_certificate_cht     : "{{ proxy_site_ssl_directory }}/christian-hammer.com/fullchain25.pem"
-  proxy_site_ssl_certificate_key_cht : "{{ proxy_site_ssl_directory }}/christian-hammer.com/privkey25.pem"
+  proxy_site_ssl_certificate         : "{{ proxy_site_ssl_directory }}/thezengarden.net/fullchain26.pem"
+  proxy_site_ssl_certificate_key     : "{{ proxy_site_ssl_directory }}/thezengarden.net/privkey26.pem"
+  proxy_site_ssl_certificate_ch      : "{{ proxy_site_ssl_directory }}/chris-hammer.com/fullchain15.pem"
+  proxy_site_ssl_certificate_key_ch  : "{{ proxy_site_ssl_directory }}/chris-hammer.com/privkey15.pem"
+  proxy_site_ssl_certificate_cht     : "{{ proxy_site_ssl_directory }}/christian-hammer.com/fullchain24.pem"
+  proxy_site_ssl_certificate_key_cht : "{{ proxy_site_ssl_directory }}/christian-hammer.com/privkey24.pem"
   proxy_site_ssl_protocols           : TLSv1.2
   proxy_site_ssl_ciphers             : ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256
 

defaults/main/proxy_sites.yml

@@ -1,11 +1,11 @@
 ---
 
 proxy_sites:
-  # wiki.thezengarden.net:
-  #   proto      : http
-  #   dest       : docker.thezengarden.net
-  #   port       : 8081
-  #   max_upload : "{{ proxy_default_max_upload }}"
+  wiki.thezengarden.net:
+    proto      : http
+    dest       : docker.thezengarden.net
+    port       : 8081
+    max_upload : "{{ proxy_default_max_upload }}"
 
 
   git.thezengarden.net:
@@ -35,11 +35,6 @@ proxy_sites:
     port       : 7777
     max_upload : "{{ proxy_default_max_upload }}"
 
-  dpaste.thezengarden.net:
-    proto      : http
-    dest       : podman.thezengarden.net
-    port       : 8888
-    max_upload : "{{ proxy_default_max_upload }}"
 
   ipam.thezengarden.net:
     proto : http
@@ -136,10 +131,10 @@ proxy_sites:
     max_upload : "{{ proxy_default_max_upload }}"
 
 
-  # pw-old.thezengarden.net:
-  #   proto : http
-  #   dest  : docker.thezengarden.net
-  #   port  : 8001
+  pw-old.thezengarden.net:
+    proto : http
+    dest  : docker.thezengarden.net
+    port  : 8001
 
 
   pw.thezengarden.net:
@@ -203,10 +198,10 @@ proxy_sites:
     port  : 443
 
 
-  # sso.thezengarden.net:
-  #   proto : https
-  #   dest  : docker.thezengarden.net
-  #   port  : 9443
+  sso.thezengarden.net:
+    proto : https
+    dest  : docker.thezengarden.net
+    port  : 9443
 
 
   stor1.thezengarden.net:
@@ -225,6 +220,7 @@ proxy_sites:
     proto: https
     dest: proxmox_nodes
     upstream_servers:
+      - zg-vm1.thezengarden.net:8006
       - zg-vm2.thezengarden.net:8006
       - zg-vm3.thezengarden.net:8006
       - zg-vm4.thezengarden.net:8006

meta/main.yml

@@ -16,7 +16,7 @@ galaxy_info:
   # - CC-BY
   license: GPLv2
 
-  min_ansible_version: "2.10"
+  min_ansible_version: 2.4
 
   # If this a Container Enabled role, provide the minimum Ansible Container version.
   # min_ansible_container_version:
@@ -36,9 +36,9 @@ galaxy_info:
   # https://galaxy.ansible.com/api/v1/platforms/
   #
   platforms:
-    - name: EL
+    - name: Debian
       versions:
-        - all
+        - 10
   # - name: Fedora
   #   versions:
   #   - all

tasks/main.yml

@@ -5,6 +5,7 @@
     state: present
   tags: always
 
+
 - name: Enable nginx at boot time
   ansible.builtin.service:
     name: nginx
@@ -12,12 +13,14 @@
   tags: always
   when: ansible_virtualization_type != "docker"
 
+
 - name: Clean conf.d
   ansible.builtin.file:
     path: "{{ proxy_site_conf_dir }}"
     state: absent
   tags: ['clean_deploy', 'never']
 
+
 - name: Create conf.d directory
   ansible.builtin.file:
     path: "{{ proxy_site_conf_dir }}"
@@ -25,6 +28,7 @@
     mode: "0755"
   tags: always
 
+
 - name: Create log directory
   ansible.builtin.file:
     path: "{{ proxy_site_log_path }}"
@@ -32,6 +36,7 @@
     mode: "0755"
   tags: always
 
+
   ## TODO: fix the perms on ssl certs!!@*&!@^&*
 
 - name: Clone ssl certs
@@ -43,6 +48,7 @@
   tags: always
   notify: restart nginx
 
+
 - name: Write configuration file(s)
   ansible.builtin.template:
     src: proxy_site.j2
@@ -53,6 +59,7 @@
   tags: always
   notify: restart nginx
 
+
 - name: Start nginx
   ansible.builtin.service:
     name: nginx

tests/inventory

@@ -0,0 +1,2 @@
+localhost
+

tests/test.yml

@@ -0,0 +1,5 @@
+---
+- hosts: localhost
+  remote_user: root
+  roles:
+    - zen_rev_proxy

vars/main.yml

@@ -0,0 +1,2 @@
+---
+# vars file for zen_rev_proxy