Add custom error pages and Nginx configuration for proxy module

- Introduced custom HTML error pages for various HTTP status codes (400, 401, 403, 404, 408, 429, 500, 502, 503, 504) in the proxy module.
- Created a .gitignore file to exclude non-HTML files in the error resources directory.
- Updated Nginx configuration to serve custom error pages for upstream errors.
- Added new Nginx configuration templates for handling HTTP and stream protocols.
- Implemented Wireguard configuration templates and associated variables for secure connections.
- Established Kubernetes resources for Stunnel and Wireguard, including deployment, service accounts, and config maps.
- Defined variables for the Stunnel and Wireguard modules to facilitate configuration.
- Created a new Wol Proxy module with Kubernetes resources for deployment and service management.

terraform/apps/prod-01/config.tf

@@ -79,39 +79,52 @@ locals {
   #reverse proxy settings
 
   streams = {
-    "imap" = {
-      port     = 993
-      upstream = "imap.mail.svc.cluster.local"
-      protocol = "tcp"
-    }
-    "smtps" = {
-      port     = 465
-      upstream = "smtps.mail.svc.cluster.local"
-      protocol = "tcp"
-    }
+    # For now disabled, because this messes with fail2ban on the host
+    # since the ip is lost and replaced with the nginx ingress controller ip
+    # to fix this we might need to setup logging on the stream and cross reference
+    # with postfix/dovecot logs and then ban the ip on the host
+    # "imap" = {
+    #   port     = 993
+    #   upstream = "imap.mail.svc.cluster.local"
+    #   protocol = "tcp"
+    # }
+    # "smtps" = {
+    #   port     = 465
+    #   upstream = "smtps.mail.svc.cluster.local"
+    #   protocol = "tcp"
+    # }
     "21115-tcp" = {
-      port     = 21115
-      upstream = "tcp.rustdesk.svc.cluster.local"
-      protocol = "tcp"
+      port      = 21115
+      host_port = 21115
+      upstream  = "tcp.rustdesk.svc.cluster.local"
+      protocol  = "tcp"
     }
     "21116-tcp" = {
-      port     = 21116
-      upstream = "tcp.rustdesk.svc.cluster.local"
-      protocol = "tcp"
+      port      = 21116
+      host_port = 21116
+      upstream  = "tcp.rustdesk.svc.cluster.local"
+      protocol  = "tcp"
     }
     "21116-udp" = {
-      port     = 21116
-      upstream = "udp.rustdesk.svc.cluster.local"
-      protocol = "udp"
+      port      = 21116
+      host_port = 21116
+      upstream  = "udp.rustdesk.svc.cluster.local"
+      protocol  = "udp"
     }
     "21117-tcp" = {
-      port     = 21117
-      upstream = "tcp.rustdesk.svc.cluster.local"
+      port      = 21117
+      host_port = 21117
+      upstream  = "tcp.rustdesk.svc.cluster.local"
+      protocol  = "tcp"
+    }
+    "9090-tcp" = {
+      port     = 9090
+      upstream = "prometheus.prometheus.svc.cluster.local"
       protocol = "tcp"
     }
   }
 
-  reverse_proxy_wireguard_config = {
+  wireguard_config = {
     private_key    = var.wireguard_1_private_key
     public_key     = var.wireguard_1_public_key
     pre_shared_key = var.wireguard_1_pre_shared_key
@@ -125,7 +138,7 @@ locals {
     ]
   }
 
-  reverse_proxy_services = {
+  proxy_services = {
     "open-webui" = {
       http_port  = 8080
       https_port = 8443