Refactor and enhance Ansible configurations for dev-02 and nginx proxy setup
- Updated host_vars for dev-02 to include login history settings and modified code server authentication. - Adjusted opencode server configurations and reduced resource allocation. - Introduced a new playbook for configuring nginx reverse proxy with TLS and OAuth2. - Enhanced linux_dev_station role defaults and tasks, including package updates and service configurations. - Removed unnecessary credential assertions in linux_dev_station tasks. - Created nginx_proxy role with tasks for certbot, nginx installation, and oauth2-proxy setup. - Added templates for nginx and oauth2-proxy configurations. - Updated terraform configuration to reflect new DNS records for ide and agent services. - Documented changes and configurations in linux_dev_station.md for clarity and future reference.
This commit is contained in:
@@ -116,6 +116,16 @@ locals {
|
||||
type = "A"
|
||||
content = "10.19.4.210"
|
||||
},
|
||||
{
|
||||
name = "ide"
|
||||
type = "A"
|
||||
content = "10.19.4.210"
|
||||
},
|
||||
{
|
||||
name = "agent"
|
||||
type = "A"
|
||||
content = "10.19.4.210"
|
||||
},
|
||||
{
|
||||
name = "vaultwarden"
|
||||
type = "CNAME"
|
||||
@@ -126,16 +136,6 @@ locals {
|
||||
type = "CNAME"
|
||||
content = "dev-01.${local.lab_domain}."
|
||||
},
|
||||
{
|
||||
name = "opencode"
|
||||
type = "CNAME"
|
||||
content = "dev-01.${local.lab_domain}."
|
||||
},
|
||||
{
|
||||
name = "vscode"
|
||||
type = "CNAME"
|
||||
content = "dev-01.${local.lab_domain}."
|
||||
},
|
||||
]
|
||||
}
|
||||
]
|
||||
@@ -157,38 +157,6 @@ locals {
|
||||
# },
|
||||
# ]
|
||||
# }
|
||||
"opencode" = {
|
||||
http_port = 4096
|
||||
tls = true
|
||||
fqdn = ["opencode.lab.alexpires.me"]
|
||||
upstream = "http://10.19.4.210:4096"
|
||||
read_timeout = "3600s"
|
||||
|
||||
locations = [
|
||||
{
|
||||
path = "/"
|
||||
headers = {
|
||||
"Upgrade" = "$http_upgrade"
|
||||
"Connection" = "upgrade"
|
||||
}
|
||||
},
|
||||
]
|
||||
},
|
||||
"code-server" = {
|
||||
http_port = 3000
|
||||
tls = true
|
||||
fqdn = ["vscode.lab.alexpires.me"]
|
||||
upstream = "http://10.19.4.210:3000"
|
||||
locations = [
|
||||
{
|
||||
path = "/"
|
||||
headers = {
|
||||
"Upgrade" = "$http_upgrade"
|
||||
"Connection" = "upgrade"
|
||||
}
|
||||
},
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
streams = {
|
||||
|
||||
Reference in New Issue
Block a user