Added support for private apis

terraform/k8sapps/apps.tf

@@ -145,4 +145,5 @@ module "reverse_proxy" {
 
   services         = local.reverse_proxy_services
   wireguard_config = local.reverse_proxy_wireguard_config
+  auth_token       = var.nginx_token_bearer
 }

terraform/k8sapps/config.tf

@@ -88,6 +88,7 @@ locals {
     dns            = "10.19.4.1"
     allowed_ips = [
       "10.19.4.106/32",
+      "10.19.4.136/32",
     ]
   }
 
@@ -106,11 +107,17 @@ locals {
             "Connection" = "upgrade"
           }
         },
+        {
+          private  = true
+          path     = "/tools/gitea"
+          upstream = "http://10.19.4.136:8000"
+          rewrite  = "^/tools/gitea/(.*)$ /$1 break"
+        },
         {
           path = "/"
         },
       ]
-    }
+    },
   }
 
 

terraform/k8sapps/secrets.tf

@@ -134,3 +134,9 @@ variable "wireguard_1_pre_shared_key" {
   type        = string
   sensitive   = true
 }
+
+variable "nginx_token_bearer" {
+  description = "Token bearer for nginx"
+  type        = string
+  sensitive   = true
+}

terraform/k8sapps/sectool.env

@@ -34,3 +34,5 @@ TF_VAR_server_api_access_token=$SERVER_API_ACCESS_TOKEN
 TF_VAR_wireguard_1_private_key=$WIREGUARD_1_PRIVATE_KEY
 TF_VAR_wireguard_1_public_key=$WIREGUARD_1_PUBLIC_KEY
 TF_VAR_wireguard_1_pre_shared_key=$WIREGUARD_1_PRE_SHARED_KEY
+TF_VAR_nginx_token_bearer=$NGINX_TOKEN_BEARER
+