ansible/services_web.yml

55 lines
1.7 KiB
YAML
Raw Normal View History

2020-05-03 18:45:07 +02:00
#!/usr/bin/env ansible-playbook
2019-07-22 10:32:01 +02:00
---
# Deploy Docker hosts
- hosts: docker-ovh.adm.auro.re,docker-worker1-aurore.adm.auro.re
2019-07-22 10:32:01 +02:00
roles:
- docker
2019-07-22 19:14:43 +02:00
# Deploy Passbolt
- hosts: passbolt.adm.auro.re
roles:
- passbolt
2020-05-09 12:54:38 +02:00
# Deploy reverse proxy
- hosts: proxy*.adm.auro.re
2019-07-22 19:14:43 +02:00
vars:
2020-05-09 12:54:38 +02:00
certbot:
dns_rfc2136_name: certbot_challenge.
dns_rfc2136_secret: "{{ vault_certbot_dns_secret }}"
mail: tech.aurore@lists.crans.org
certname: auro.re
domains: "auro.re, *.auro.re, aurores.net, *.aurores.net, fede-aurore.net, *.fede-aurore.net"
dns_masters_ipv4: 92.222.211.196
nginx:
ssl:
cert: /etc/letsencrypt/live/auro.re/fullchain.pem
cert_key: /etc/letsencrypt/live/auro.re/privkey.pem
trusted_cert: /etc/letsencrypt/live/auro.re/chain.pem
redirect_dnames:
- aurores.net
- fede-aurore.net
reverseproxy_sites:
- {from: re2o.auro.re, to: 10.128.0.10}
- {from: intranet.auro.re, to: 10.128.0.10}
- {from: phabricator.auro.re, to: 10.128.0.50}
- {from: wiki.auro.re, to: 10.128.0.51}
- {from: www.auro.re, to: 10.128.0.52}
- {from: re2o-test.auro.re, to: 10.128.0.100}
- {from: riot.auro.re, to: "10.128.0.150:8080"}
- {from: codimd.auro.re, to: "10.128.0.150:8081"}
- {from: grafana.auro.re, to: "10.128.0.150:8082"}
- {from: privatebin.auro.re, to: "10.128.0.150:8083"}
- {from: pad.auro.re, to: "10.128.0.150:8084"}
- {from: cas.auro.re, to: "10.128.0.150:8085"}
redirect_sites:
- {from: auro.re, to: www.auro.re}
2019-07-22 19:14:43 +02:00
roles:
2020-05-09 12:54:38 +02:00
- certbot
- nginx-reverseproxy