ansible-debops-infrastructure

Unnamed repository; edit this file 'description' to name the repository.
git clone git://git.erethon.com/ansible-debops-infrastructure
Log | Files | Refs

commit 68d089dfd4e6fea1e4ff92c10f2ddbfd95587c9d
parent fa6514c56de139d6484ee59602d166f38d830b68
Author: Dionysis Grigoropoulos <dgrig@erethon.com>
Date:   Mon, 30 Apr 2018 00:30:07 +0300

haproxy: Enable (capitalism, hacked).erethon.com

Diffstat:
ansible/inventory/host_vars/spinny/haproxy.yml | 1+
ansible/roles/haproxy/templates/haproxy.cfg.j2 | 7++++++-
2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/ansible/inventory/host_vars/spinny/haproxy.yml b/ansible/inventory/host_vars/spinny/haproxy.yml @@ -2,3 +2,4 @@ prosody__public_ip: '163.172.24.171' prosody__private_ip: '192.168.122.2' +static__private_ip: '192.168.122.2' diff --git a/ansible/roles/haproxy/templates/haproxy.cfg.j2 b/ansible/roles/haproxy/templates/haproxy.cfg.j2 @@ -52,18 +52,23 @@ frontend eighty redirect scheme https if !{ ssl_fc } frontend ssl - bind *:443 ssl crt /etc/ssl/private/plothopes.com/plothopes.pem + bind *:443 ssl crt /etc/ssl/private/plothopes.com/plothopes.pem ssl crt /etc/ssl/private/erethon.com/capitalism.pem mode http http-response set-header Strict-Transport-Security max-age=16000000;\ includeSubDomains;\ preload http-request set-header X-Forwarded-Proto https if { ssl_fc } use_backend local if { url_beg /.well-known } use_backend plothopes if { hdr(host) -i plothopes.com -i www.plothopes.com } + use_backend static if { hdr(host) -i capitalism.erethon.com -i hacked.erethon.com } backend plothopes mode http server plothopes {{ plothopes__private_ip }}:{{ plothopes__port }} +backend static + mode http + server webd {{ static__private_ip }}:80 + backend local mode http server local 127.0.0.1:8080