Refactor and enhance Ansible configurations for dev-02 and nginx proxy setup

- Updated host_vars for dev-02 to include login history settings and modified code server authentication.
- Adjusted opencode server configurations and reduced resource allocation.
- Introduced a new playbook for configuring nginx reverse proxy with TLS and OAuth2.
- Enhanced linux_dev_station role defaults and tasks, including package updates and service configurations.
- Removed unnecessary credential assertions in linux_dev_station tasks.
- Created nginx_proxy role with tasks for certbot, nginx installation, and oauth2-proxy setup.
- Added templates for nginx and oauth2-proxy configurations.
- Updated terraform configuration to reflect new DNS records for ide and agent services.
- Documented changes and configurations in linux_dev_station.md for clarity and future reference.
This commit is contained in:
2026-07-11 19:29:50 -04:00
parent 5818b05d96
commit 272ed647cf
23 changed files with 626 additions and 99 deletions
+10 -42
View File
@@ -116,6 +116,16 @@ locals {
type = "A"
content = "10.19.4.210"
},
{
name = "ide"
type = "A"
content = "10.19.4.210"
},
{
name = "agent"
type = "A"
content = "10.19.4.210"
},
{
name = "vaultwarden"
type = "CNAME"
@@ -126,16 +136,6 @@ locals {
type = "CNAME"
content = "dev-01.${local.lab_domain}."
},
{
name = "opencode"
type = "CNAME"
content = "dev-01.${local.lab_domain}."
},
{
name = "vscode"
type = "CNAME"
content = "dev-01.${local.lab_domain}."
},
]
}
]
@@ -157,38 +157,6 @@ locals {
# },
# ]
# }
"opencode" = {
http_port = 4096
tls = true
fqdn = ["opencode.lab.alexpires.me"]
upstream = "http://10.19.4.210:4096"
read_timeout = "3600s"
locations = [
{
path = "/"
headers = {
"Upgrade" = "$http_upgrade"
"Connection" = "upgrade"
}
},
]
},
"code-server" = {
http_port = 3000
tls = true
fqdn = ["vscode.lab.alexpires.me"]
upstream = "http://10.19.4.210:3000"
locations = [
{
path = "/"
headers = {
"Upgrade" = "$http_upgrade"
"Connection" = "upgrade"
}
},
]
}
}
streams = {