wip: proxy2

2022-09-19 17:39:16 +00:00
14 changed files with 22 additions and 1 deletions
--- a/ansible/inventory/group_vars/all/pki.yml
+++ b/ansible/inventory/group_vars/all/pki.yml
@ -14,4 +14,4 @@ pki_acme: True

 pki_acme_default_subdomains: []

-# pki_acme_ca: 'le-staging-v2'
+pki_acme_ca: 'le-staging-v2'
--- a/ansible/inventory/host_vars/proxy2/nginx.yml
+++ b/ansible/inventory/host_vars/proxy2/nginx.yml
@ -0,0 +1,12 @@
+---
+
+nginx__servers:
+
+  - name: 'staging.bij1.net'
+    type: 'proxy'
+    proxy_pass: 'https://wp-staging.bij1.net'
+
+pki_realms:
+
+  - name: 'staging.bij1.net'
+    internal: False
--- a/ansible/inventory/hosts
+++ b/ansible/inventory/hosts
@ -31,6 +31,7 @@ stemmen	    ansible_host=stemmen.bij1.net ansible_user=ansible-admin
 ; cloud	    ansible_host=cloud.bij1.net ansible_user=ansible-admin
 ; crm	        ansible_host=crm.bij1.net ansible_user=ansible-admin
 ; bbb	        ansible_host=bbb.bij1.net ansible_user=ansible-admin
+proxy2          ansible_host=proxy2.bij1.net ansible_user=ansible-admin

 [debops_service_ifupdown]
 intranet
@ -48,6 +49,7 @@ stemmen
 ; cloud
 ; crm
 ; bbb
+proxy2

 [debops_service_controller]
 controller
@ -60,6 +62,7 @@ code
 build
 static
 stemmen
+proxy2

 [debops_service_docker_server]
 code
@ -70,3 +73,7 @@ db

 [debops_service_postgresql_server]
 db
+
+[proxy]
+proxy2
+
--- a/ansible/secret/credentials/proxy2/root_account/password
+++ b/ansible/secret/credentials/proxy2/root_account/password
--- a/ansible/secret/journald/fss/proxy2/verify_key
+++ b/ansible/secret/journald/fss/proxy2/verify_key
--- a/ansible/secret/pki/authorities/domain/certs/69A27A53759B844FEA60A60E48E50F5D.pem
+++ b/ansible/secret/pki/authorities/domain/certs/69A27A53759B844FEA60A60E48E50F5D.pem
--- a/ansible/secret/pki/authorities/domain/database/index
+++ b/ansible/secret/pki/authorities/domain/database/index
--- a/ansible/secret/pki/authorities/domain/database/index.old
+++ b/ansible/secret/pki/authorities/domain/database/index.old
--- a/ansible/secret/pki/authorities/domain/database/serial
+++ b/ansible/secret/pki/authorities/domain/database/serial
--- a/ansible/secret/pki/authorities/domain/database/serial.old
+++ b/ansible/secret/pki/authorities/domain/database/serial.old
--- a/ansible/secret/pki/realms/by-host/proxy2/domain/internal/cert.pem
+++ b/ansible/secret/pki/realms/by-host/proxy2/domain/internal/cert.pem
--- a/ansible/secret/pki/realms/by-host/proxy2/domain/internal/intermediate.pem
+++ b/ansible/secret/pki/realms/by-host/proxy2/domain/internal/intermediate.pem
@ -0,0 +1 @@
+../../../../../authorities/domain/subject/cert.pem
--- a/ansible/secret/pki/realms/by-host/proxy2/domain/internal/root.pem
+++ b/ansible/secret/pki/realms/by-host/proxy2/domain/internal/root.pem
@ -0,0 +1 @@
+../../../../../authorities/domain/issuer/subject/cert.pem
--- a/ansible/secret/pki/requests/domain/proxy2/domain/request.pem
+++ b/ansible/secret/pki/requests/domain/proxy2/domain/request.pem
				`@ -0,0 +1 @@`
				`../../../../../authorities/domain/subject/cert.pem`
				`@ -0,0 +1 @@`
				`../../../../../authorities/domain/issuer/subject/cert.pem`