add reverse proxy with a bunch of internal sites exposed behind oauth; also update dashy [ci skip]

modules/kubernetes/reverse_proxy/main.tf

@@ -0,0 +1,123 @@
+# Reverse proxy for things in my infra that are 
+# outside of K8S but would be nice to use the Nginx-ingress
+
+variable "tls_secret_name" {}
+
+resource "kubernetes_namespace" "reverse-proxy" {
+  metadata {
+    name = "reverse-proxy"
+  }
+}
+
+module "tls_secret" {
+  source          = "../setup_tls_secret"
+  namespace       = "reverse-proxy"
+  tls_secret_name = var.tls_secret_name
+}
+
+# https://pfsense.viktorbarzin.me/
+module "pfsense" {
+  source           = "./factory"
+  name             = "pfsense"
+  external_name    = "pfsense.viktorbarzin.lan"
+  tls_secret_name  = var.tls_secret_name
+  port             = 443
+  backend_protocol = "HTTPS"
+}
+
+# https://nas.viktorbarzin.me/
+module "nas" {
+  source           = "./factory"
+  name             = "nas"
+  external_name    = "nas.viktorbarzin.lan"
+  port             = 5001
+  tls_secret_name  = var.tls_secret_name
+  backend_protocol = "HTTPS"
+}
+
+# https://idrac.viktorbarzin.me/
+module "idrac" {
+  source          = "./factory"
+  name            = "idrac"
+  external_name   = "idrac.viktorbarzin.lan"
+  port            = 80
+  tls_secret_name = var.tls_secret_name
+}
+
+# Can either listen on https or http; can't do both :/
+# TODO: Not working yet
+module "tp-link-gateway" {
+  source           = "./factory"
+  name             = "gw"
+  external_name    = "gw.viktorbarzin.lan"
+  port             = 443
+  tls_secret_name  = var.tls_secret_name
+  backend_protocol = "HTTPS"
+}
+
+# https://truenas.viktorbarzin.me/
+module "truenas" {
+  source          = "./factory"
+  name            = "truenas"
+  external_name   = "truenas.viktorbarzin.lan"
+  port            = 80
+  tls_secret_name = var.tls_secret_name
+}
+
+# https://r730.viktorbarzin.me/
+module "r730" {
+  source           = "./factory"
+  name             = "r730"
+  external_name    = "r730.viktorbarzin.lan"
+  port             = 443
+  tls_secret_name  = var.tls_secret_name
+  backend_protocol = "HTTPS"
+}
+
+# https://esxi.viktorbarzin.me/
+module "esxi" {
+  source           = "./factory"
+  name             = "esxi"
+  external_name    = "esxi.viktorbarzin.lan"
+  port             = 443
+  tls_secret_name  = var.tls_secret_name
+  backend_protocol = "HTTPS"
+}
+
+# https://valchedrym.viktorbarzin.me/
+module "valchedrym" {
+  source           = "./factory"
+  name             = "valchedrym"
+  external_name    = "valchedrym.viktorbarzin.lan"
+  port             = 20123
+  tls_secret_name  = var.tls_secret_name
+  backend_protocol = "HTTPS"
+}
+
+# https://ip150.viktorbarzin.me/
+# Does not seem to load? - works when auth is down
+module "valchedrym-ip150" {
+  source          = "./factory"
+  name            = "ip150"
+  external_name   = "valchedrym.ddns.net"
+  port            = 8080
+  tls_secret_name = var.tls_secret_name
+}
+
+# https://mladost3.viktorbarzin.me/
+module "mladost3" {
+  source          = "./factory"
+  name            = "mladost3"
+  external_name   = "mladost3.ddns.net"
+  port            = 8080
+  tls_secret_name = var.tls_secret_name
+}
+
+# https://server-switch.viktorbarzin.me/
+module "server-switch" {
+  source          = "./factory"
+  name            = "server-switch"
+  external_name   = "server-switch.viktorbarzin.lan"
+  port            = 80
+  tls_secret_name = var.tls_secret_name
+}