136 lines
3.6 KiB
HCL
136 lines
3.6 KiB
HCL
# Reverse proxy for things in my infra that are
|
|
# outside of K8S but would be nice to use the Nginx-ingress
|
|
|
|
variable "tls_secret_name" {}
|
|
|
|
resource "kubernetes_namespace" "reverse-proxy" {
|
|
metadata {
|
|
name = "reverse-proxy"
|
|
}
|
|
}
|
|
|
|
module "tls_secret" {
|
|
source = "../setup_tls_secret"
|
|
namespace = "reverse-proxy"
|
|
tls_secret_name = var.tls_secret_name
|
|
}
|
|
|
|
# https://pfsense.viktorbarzin.me/
|
|
module "pfsense" {
|
|
source = "./factory"
|
|
name = "pfsense"
|
|
external_name = "pfsense.viktorbarzin.lan"
|
|
tls_secret_name = var.tls_secret_name
|
|
port = 443
|
|
backend_protocol = "HTTPS"
|
|
}
|
|
|
|
# https://nas.viktorbarzin.me/
|
|
module "nas" {
|
|
source = "./factory"
|
|
name = "nas"
|
|
external_name = "nas.viktorbarzin.lan"
|
|
port = 5001
|
|
tls_secret_name = var.tls_secret_name
|
|
backend_protocol = "HTTPS"
|
|
}
|
|
|
|
# https://files.viktorbarzin.me/
|
|
module "nas-files" {
|
|
source = "./factory"
|
|
name = "files"
|
|
external_name = "nas.viktorbarzin.lan"
|
|
port = 5001
|
|
tls_secret_name = var.tls_secret_name
|
|
backend_protocol = "HTTPS"
|
|
protected = false # allow anyone to download files
|
|
ingress_path = ["/sharing", "/scripts", "/webman", "/wfmlogindialog.js", "/fsdownload"]
|
|
}
|
|
|
|
# https://idrac.viktorbarzin.me/
|
|
module "idrac" {
|
|
source = "./factory"
|
|
name = "idrac"
|
|
external_name = "idrac.viktorbarzin.lan"
|
|
port = 443
|
|
tls_secret_name = var.tls_secret_name
|
|
backend_protocol = "HTTPS"
|
|
}
|
|
|
|
# Can either listen on https or http; can't do both :/
|
|
# TODO: Not working yet
|
|
module "tp-link-gateway" {
|
|
source = "./factory"
|
|
name = "gw"
|
|
external_name = "gw.viktorbarzin.lan"
|
|
port = 443
|
|
tls_secret_name = var.tls_secret_name
|
|
backend_protocol = "HTTPS"
|
|
}
|
|
|
|
# https://truenas.viktorbarzin.me/
|
|
module "truenas" {
|
|
source = "./factory"
|
|
name = "truenas"
|
|
external_name = "truenas.viktorbarzin.lan"
|
|
port = 80
|
|
tls_secret_name = var.tls_secret_name
|
|
}
|
|
|
|
# https://r730.viktorbarzin.me/
|
|
module "r730" {
|
|
source = "./factory"
|
|
name = "r730"
|
|
external_name = "r730.viktorbarzin.lan"
|
|
port = 443
|
|
tls_secret_name = var.tls_secret_name
|
|
backend_protocol = "HTTPS"
|
|
}
|
|
|
|
# https://esxi.viktorbarzin.me/
|
|
module "esxi" {
|
|
source = "./factory"
|
|
name = "esxi"
|
|
external_name = "esxi.viktorbarzin.lan"
|
|
port = 443
|
|
tls_secret_name = var.tls_secret_name
|
|
backend_protocol = "HTTPS"
|
|
}
|
|
|
|
# https://valchedrym.viktorbarzin.me/
|
|
module "valchedrym" {
|
|
source = "./factory"
|
|
name = "valchedrym"
|
|
external_name = "valchedrym.viktorbarzin.lan"
|
|
port = 20123
|
|
tls_secret_name = var.tls_secret_name
|
|
backend_protocol = "HTTPS"
|
|
}
|
|
|
|
# https://ip150.viktorbarzin.me/
|
|
# Does not seem to load? - works when auth is down
|
|
module "valchedrym-ip150" {
|
|
source = "./factory"
|
|
name = "ip150"
|
|
external_name = "valchedrym.ddns.net"
|
|
port = 8080
|
|
tls_secret_name = var.tls_secret_name
|
|
}
|
|
|
|
# https://mladost3.viktorbarzin.me/
|
|
module "mladost3" {
|
|
source = "./factory"
|
|
name = "mladost3"
|
|
external_name = "mladost3.ddns.net"
|
|
port = 8080
|
|
tls_secret_name = var.tls_secret_name
|
|
}
|
|
|
|
# https://server-switch.viktorbarzin.me/
|
|
module "server-switch" {
|
|
source = "./factory"
|
|
name = "server-switch"
|
|
external_name = "server-switch.viktorbarzin.lan"
|
|
port = 80
|
|
tls_secret_name = var.tls_secret_name
|
|
}
|