Dustin C. Hatch
c676aa2a0b
This commit adds an HAProxy backend for Bitwarden, and adds ACL rules to the frontend to proxy traffic to *bitwarden.pyrocufflink.blue* or *bitwarden.pyrocufflink.net* to it.
42 lines
1.1 KiB
YAML
42 lines
1.1 KiB
YAML
- name: ensure main haproxy frontend is configured
|
|
template:
|
|
src=frontend-main.haproxy.cfg.j2
|
|
dest=/etc/haproxy/50-frontend-main.cfg
|
|
mode=0644
|
|
notify: reload haproxy
|
|
|
|
- name: ensure gitea haproxy backend is configured
|
|
template:
|
|
src=backend-gitea.haproxy.cfg.j2
|
|
dest=/etc/haproxy/70-backend-gitea.cfg
|
|
mode=0644
|
|
notify: reload haproxy
|
|
|
|
- name: ensure jenkins haproxy backend is configured
|
|
template:
|
|
src=backend-jenkins.haproxy.cfg.j2
|
|
dest=/etc/haproxy/70-backend-jenkins.cfg
|
|
mode=0644
|
|
notify: reload haproxy
|
|
|
|
- name: ensure bitwarden haproxy backend is configured
|
|
template:
|
|
src=backend-bitwarden.haproxy.cfg.j2
|
|
dest=/etc/haproxy/70-backend-bitwarden.cfg
|
|
mode=0644
|
|
notify: reload haproxy
|
|
|
|
- name: ensure openvpn haproxy backend is configured
|
|
template:
|
|
src=backend-openvpn.haproxy.cfg.j2
|
|
dest=/etc/haproxy/70-backend-openvpn.cfg
|
|
mode=0644
|
|
notify: reload haproxy
|
|
|
|
- name: ensure websites haproxy backend is configured
|
|
template:
|
|
src=backend-websites.haproxy.cfg.j2
|
|
dest=/etc/haproxy/70-backend-websites.cfg
|
|
mode=0644
|
|
notify: reload haproxy
|