Add base terraform config

2026-09-08 12:23:37 +02:00
parent a56911b896
commit 98793acc62
30 changed files with 255 additions and 886 deletions
--- a/gateway/lib/scripts/services.yml
+++ b/gateway/lib/scripts/services.yml
@@ -0,0 +1,234 @@
+http:
+  routers:
+    http-catchall:
+      rule: "HostRegexp(`{host:.+}`)"
+      entryPoints:
+        - web
+      middlewares:
+        - redirect-to-https
+      service: noop
+
+    amap:
+      rule: "Host(`amap.aldon.fr`)"
+      entryPoints:
+        - websecure
+      service: amap
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors
+    bookshelf:
+      rule: "Host(`bookshelf.aldon.fr`)"
+      entryPoints:
+        - websecure
+      service: bookshelf
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors
+    fefan:
+      rule: "Host(`fefan.fr`)"
+      entryPoints:
+        - websecure
+      service: fefan
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors
+    content-fefan:
+      rule: "Host(`content.fefan.fr`)"
+      entryPoints:
+        - websecure
+      service: content-fefan
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors
+    gitea:
+      rule: "Host(`gitea.aldon.fr`)"
+      entryPoints:
+        - websecure
+      service: gitea
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors
+    listmonk:
+      rule: "Host(`listmonk.fefan.fr`)"
+      entryPoints:
+        - websecure
+      service: listmonk
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors
+    aldon-http:
+      rule: "Host(`aldon.fr`)"
+      entryPoints:
+        - web
+      middlewares:
+        - redirect-to-aldon
+      service: noop
+    aldon:
+      rule: "Host(`aldon.fr`)"
+      entryPoints:
+        - websecure
+      service: noop
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-to-aldon
+        - redirect-errors
+    nextcloud:
+      rule: "Host(`nextcloud.aldon.fr`)"
+      entryPoints:
+        - websecure
+      service: nextcloud
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors
+    rocket:
+      rule: "Host(`discussion.fefan.fr`)"
+      entryPoints:
+        - websecure
+      service: rocket
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors    
+    mathieu:
+      rule: "Host(`mathieu.wiki`)"
+      entryPoints:
+        - websecure
+      service: noop
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-to-mathieu
+        - redirect-errors
+    mathieu-http:
+      rule: "Host(`mathieu.wiki`)"
+      entryPoints:
+        - web
+      middlewares:
+        - redirect-to-mathieu
+      service: noop
+    wiki:
+      rule: "Host(`benoit.mathieu.wiki`)"
+      entryPoints:
+        - websecure
+      service: wiki
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors    
+    vaultwarden:
+      rule: "Host(`vaultwarden.aldon.fr`)"
+      entryPoints:
+        - websecure
+      service: vaultwarden
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors
+    keycloak:
+      rule: "Host(`keycloak.aldon.fr`)"
+      entryPoints:
+        - websecure
+      service: keycloak
+      tls:
+        certResolver: letsencrypt
+      middlewares:
+        - redirect-errors
+  services:
+    amap:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.96:80"
+    bookshelf:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.91:80"
+    fefan:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.92:3000"
+    content-fefan:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.92:1337"
+    gitea:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.90:3000"
+    listmonk:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.93:9000"
+    noop:
+      loadBalancer:
+        servers:
+          - url: "http://127.0.0.1"
+    nextcloud:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.30:11000"
+    rocket:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.15:3000"
+    wiki:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.38:8080"
+
+    vaultwarden:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.36:80"
+
+    keycloak:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.34:8080"
+
+    error-handler-service:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://127.0.0.1:8090"
+  middlewares:
+    redirect-to-mathieu:
+      redirectRegex:
+        regex: "^https?://mathieu.wiki/(.*)"
+        replacement: "https://benoit.mathieu.wiki/$1"
+        permanent: true
+    redirect-to-aldon:
+      redirectRegex:
+        regex: "^https?://aldon.fr/(.*)"
+        replacement: "https://julien.aldon.fr/$1"
+        permanent: true
+    redirect-to-https:
+      redirectScheme:
+        scheme: https
+    redirect-errors:
+      errors:
+        status:
+          - "500"
+          - "501"
+          - "503"
+          - "502"
+        service: error-handler-service
+        query: "/502.html"