Enhance infrastructure and application configurations

- Updated AGENTS.md to include new directories for execution plans and implemented feature reports.
- Modified Ansible host variables for dev-02 and gpu-01 to change API endpoints and add new configurations for Scaleway.
- Adjusted firewall rules in gpu-01 to allow HTTPS traffic instead of the previous Ollama port.
- Added OAuth2 proxy configurations to gpu-01 for enhanced security.
- Removed deprecated open-webui module from Terraform app configurations.
- Updated Terraform configurations to reflect changes in local variables and removed unused secrets.
- Created a new sectool.json file for CloudNS integration with Bitwarden.
- Enhanced SELinux configurations for nginx to allow connections to any port and added oauth2-proxy port.
This commit is contained in:
2026-07-12 16:28:45 -04:00
parent a4a8554fb6
commit 8724360fb2
23 changed files with 2106 additions and 77 deletions
-11
View File
@@ -1,14 +1,3 @@
module "open-webui" {
source = "../../modules/apps/open-webui"
persistent_folder = local.persistent_folder
fqdn = local.open_webui_fqdn
llm_proxy = local.llm_proxy
secret_key = var.webui_secret_key
tag = "v0.9.2-slim"
log_level = local.open_webui_log_level
}
module "samba" {
source = "../../modules/apps/samba"
+6 -18
View File
@@ -6,10 +6,6 @@ locals {
lab_domain = "lab.alexpires.me"
internal_issuer = "internal-ca"
# open-webui
open_webui_fqdn = "open-webui.${local.lab_domain}"
open_webui_log_level = "DEBUG"
# samba
samba_shares = [
{
@@ -61,12 +57,7 @@ locals {
type = "CNAME"
content = "dev-01.${local.lab_domain}."
},
{
name = "open-webui"
type = "CNAME"
content = "dev-01.${local.lab_domain}."
},
{
{
name = "smb"
type = "CNAME"
content = "dev-01.${local.lab_domain}."
@@ -116,6 +107,11 @@ locals {
type = "A"
content = "10.19.4.210"
},
{
name = "llm"
type = "A"
content = "10.19.4.106"
},
{
name = "ide"
type = "A"
@@ -180,14 +176,6 @@ locals {
}
}
llm_proxy = {
enabled = true
mac = "04:7c:16:d6:63:66"
ip = "10.19.4.106"
port = 11434
scheme = "http"
}
llm_proxy_1 = {
enabled = true
mac = "52:54:00:CD:DD:2E"
-6
View File
@@ -22,12 +22,6 @@ variable "telegram_bot_token" {
sensitive = true
}
variable "webui_secret_key" {
description = "The secret key for WEBUI"
type = string
sensitive = true
}
variable "searxng_secret_key" {
description = "The secret key for SearXNG"
type = string