Main changes:
- Rewritten way of creating HTTPS hosts. Prevents creating HTTPS vhost without existing certificate.
- Break out conditions into a list.
Co-authored-by: meaz <meaz@disroot.org>
Reviewed-on: #65
Reviewed-by: meaz <meaz@no-reply@disroot.org>
Unless I messed up with something, I can not deploy correctly if I keep `{{ item.proto }`. Indeed, it has to be set as http by default, but if I set `proto` in defaults as `http`, set certificates aren't deployed...
And as I just wrote, it has to be `proxy_pass http://<proxybox>:64737;` anyway.
I'm done with the role btw.
Reviewed-on: #51
I've just noticed that we have a movim branch, but that we never done a PR!
Co-authored-by: muppeth <muppeth@disroot.org>
Reviewed-on: #55
Reviewed-by: muppeth <muppeth@no-reply@disroot.org>
When using reverse rpoxy in front of searx and using limiter (or filtron) we need to be able to pass on client real ip.
Co-authored-by: muppeth <muppeth@disroot.org>
Reviewed-on: #54
Reviewed-by: meaz <meaz@no-reply@disroot.org>
Working, just not for pict-rs, so if you can have a look @muppeth
Co-authored-by: meaz <meaz@disroot.org>
Co-authored-by: muppeth <muppeth@disroot.org>
Reviewed-on: #34
Ansible's builtin base64 decode is automatically moving to new line which was breaking the configuration as it needs `;` at the end. Adding trim solves it.
Additionally removed .onion since the generated onion address already has it.
Co-authored-by: muppeth <muppeth@disroot.org>
Reviewed-on: #41
Reviewed-by: meaz <meaz@no-reply@disroot.org>
@muppeth could you check https://github.com/xwiki-labs/cryptpad/commits/main/docs/example.nginx.conf, the two commits from Dec 7, 2022 , and adjust as needed? I'm not too sure where to implement those changes, not in cryptpad template apparently...
Co-authored-by: meaz <meaz@disroot.org>
Reviewed-on: #37
Reviewed-by: muppeth <muppeth@no-reply@disroot.org>
added task of deploying maintenance pages for vhost for easy swap when service under maintenance
Co-authored-by: muppeth <muppeth@disroot.org>
Reviewed-on: #35
Reviewed-by: meaz <meaz@no-reply@disroot.org>
Part of a group of PR's rewriting and cleaning up Nginx headers.
Co-authored-by: antilopa <antilopa@disroot.org>
Co-authored-by: muppeth <muppeth@disroot.org>
Co-authored-by: meaz <meaz@disroot.org>
Reviewed-on: #17
Reviewed-by: muppeth <muppeth@no-reply@disroot.org>
Reviewed-by: meaz <meaz@no-reply@disroot.org>
Co-authored-by: antilopa <antilopa@no-reply@disroot.org>
Co-committed-by: antilopa <antilopa@no-reply@disroot.org>
By default it will set `https: vector:` unless `item.ancestors` is defined in vhost array
Co-authored-by: muppeth <muppeth@disroot.org>
Co-authored-by: meaz <meaz@disroot.org>
Co-authored-by: meaz <meaz@no-reply@disroot.org>
Reviewed-on: #31
Reviewed-by: meaz <meaz@no-reply@disroot.org>
(sorry I messed up a it with the branch name, as I was working on gitea update at the same time)
Co-authored-by: meaz <meaz@disroot.org>
Reviewed-on: #16
Reviewed-by: muppeth <muppeth@no-reply@disroot.org>
Reviewed-by: antilopa <antilopa@no-reply@disroot.org>
Co-authored-by: meaz <meaz@no-reply@disroot.org>
Co-committed-by: meaz <meaz@no-reply@disroot.org>
getting ready for public release (even though we might switch at some point) + make it work with vagrant for upgrade tests.
Co-authored-by: meaz <meaz@disroot.org>
Reviewed-on: #15
Reviewed-by: muppeth <muppeth@no-reply@disroot.org>
Reviewed-by: antilopa <antilopa@no-reply@disroot.org>
Co-authored-by: meaz <meaz@no-reply@disroot.org>
Co-committed-by: meaz <meaz@no-reply@disroot.org>
muppeth
meaz
antilopa