Dustin C. Hatch
921a12cf1f
Expose a virtual host on a separate TCP port that uses the PROXY protocol. This way, HAProxy can pass the original client IP address to Jellyfin without terminating the TLS connection.
29 lines
588 B
YAML
29 lines
588 B
YAML
- name: ensure apache is configured to proxy for jellyfin
|
|
template:
|
|
src: jellyfin.httpd.conf.j2
|
|
dest: /etc/httpd/conf.d/jellyfin.conf
|
|
owner: root
|
|
group: root
|
|
mode: u=rw,go=r
|
|
notify:
|
|
- reload httpd
|
|
tags:
|
|
- apache
|
|
|
|
- name: ensure selinux is configured for apache reverse proxy
|
|
seboolean:
|
|
name: httpd_can_network_connect
|
|
state: true
|
|
persistent: true
|
|
tags:
|
|
- selinux
|
|
|
|
- name: ensure jellyfin http proxy port is allowed in firewall
|
|
firewalld:
|
|
port: 8443/tcp
|
|
state: enabled
|
|
immediate: true
|
|
permanent: true
|
|
tags:
|
|
- firewalld
|