Addes support for reverse proxy to home server

2025-06-01 17:14:33 +02:00
parent 8dd48ec2c7
commit b0162abb88
25 changed files with 632 additions and 18 deletions
@@ -0,0 +1,45 @@
+variable "tag" {
+  description = "The version of the nginx server to install"
+  type        = string
+  default     = "stable-alpine"
+}
+
+variable "wireguard_config" {
+  description = "The Wireguard configuration file"
+  type = object({
+    private_key    = string
+    public_key     = string
+    pre_shared_key = string
+    endpoint       = string
+    endpoint_port  = number
+    address        = string
+    dns            = string
+    allowed_ips    = list(string)
+  })
+  default   = null
+  sensitive = true
+}
+
+variable "issuer_name" {
+  description = "The name of the issuer to use for TLS certificates, internal certificates"
+  type        = string
+  default     = "internal-ca"
+}
+
+variable "services" {
+  description = "A list of services to be deployed"
+  type = map(object({
+    fqdn            = list(string)
+    upstream        = string
+    default_headers = optional(map(string), {}),
+    http_port       = optional(number, 80)
+    https_port      = optional(number, 443)
+    tls             = optional(bool, false)
+    locations = optional(list(object({
+      path    = string,
+      headers = optional(map(string), {}),
+    })), [])
+    custom_snippet = optional(string, "")
+    config         = optional(string, "")
+  }))
+}