From daef0cf448af17357b552245f39067a9d340ce3d Mon Sep 17 00:00:00 2001
From: Elizabeth Hunt <me@liz.coffee>
Date: Sun, 27 Apr 2025 21:15:30 -0700
Subject: Waow

---
 .../outbound/templates/proxy/nginx/conf.d/bin.conf      | 17 +++++++++++++++++
 .../outbound/templates/proxy/nginx/conf.d/default.conf  | 11 +++++++++++
 .../outbound/templates/proxy/nginx/conf.d/idm.conf      | 13 +++++++++++++
 .../outbound/templates/proxy/nginx/conf.d/kanban.conf   | 13 +++++++++++++
 .../outbound/templates/proxy/nginx/conf.d/mail.conf     | 15 +++++++++++++++
 .../outbound/templates/proxy/nginx/conf.d/notes.conf    | 13 +++++++++++++
 6 files changed, 82 insertions(+)
 create mode 100644 playbooks/roles/outbound/templates/proxy/nginx/conf.d/bin.conf
 create mode 100644 playbooks/roles/outbound/templates/proxy/nginx/conf.d/default.conf
 create mode 100644 playbooks/roles/outbound/templates/proxy/nginx/conf.d/idm.conf
 create mode 100644 playbooks/roles/outbound/templates/proxy/nginx/conf.d/kanban.conf
 create mode 100644 playbooks/roles/outbound/templates/proxy/nginx/conf.d/mail.conf
 create mode 100644 playbooks/roles/outbound/templates/proxy/nginx/conf.d/notes.conf

(limited to 'playbooks/roles/outbound/templates/proxy/nginx/conf.d')

diff --git a/playbooks/roles/outbound/templates/proxy/nginx/conf.d/bin.conf b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/bin.conf
new file mode 100644
index 0000000..3c5682d
--- /dev/null
+++ b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/bin.conf
@@ -0,0 +1,17 @@
+server {
+    listen 80;
+    server_name bin.liz.coffee;
+    client_max_body_size 200M;
+
+    location / {
+        proxy_pass https://{{ loadbalancer_ip }};
+        proxy_ssl_verify off;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+}
diff --git a/playbooks/roles/outbound/templates/proxy/nginx/conf.d/default.conf b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/default.conf
new file mode 100644
index 0000000..f4a8007
--- /dev/null
+++ b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/default.conf
@@ -0,0 +1,11 @@
+server {
+    listen 80 default_server;
+
+    location / {
+        return 404;
+    }
+
+    location /health {
+        return 200;
+    }
+}
diff --git a/playbooks/roles/outbound/templates/proxy/nginx/conf.d/idm.conf b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/idm.conf
new file mode 100644
index 0000000..c85ebcf
--- /dev/null
+++ b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/idm.conf
@@ -0,0 +1,13 @@
+server {
+    listen 80;
+    server_name idm.liz.coffee;
+
+    location / {
+        proxy_pass https://{{ loadbalancer_ip }};
+        proxy_ssl_verify off;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
diff --git a/playbooks/roles/outbound/templates/proxy/nginx/conf.d/kanban.conf b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/kanban.conf
new file mode 100644
index 0000000..b668310
--- /dev/null
+++ b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/kanban.conf
@@ -0,0 +1,13 @@
+server {
+    listen 80;
+    server_name kanban.liz.coffee;
+
+    location / {
+        proxy_pass https://{{ loadbalancer_ip }};
+        proxy_ssl_verify off;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
diff --git a/playbooks/roles/outbound/templates/proxy/nginx/conf.d/mail.conf b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/mail.conf
new file mode 100644
index 0000000..c810f5a
--- /dev/null
+++ b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/mail.conf
@@ -0,0 +1,15 @@
+server {
+    listen 80;
+    server_name mail.liz.coffee;
+    location / {
+        proxy_pass https://{{ loadbalancer_ip }};
+        proxy_ssl_verify off;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+}
diff --git a/playbooks/roles/outbound/templates/proxy/nginx/conf.d/notes.conf b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/notes.conf
new file mode 100644
index 0000000..f7937dd
--- /dev/null
+++ b/playbooks/roles/outbound/templates/proxy/nginx/conf.d/notes.conf
@@ -0,0 +1,13 @@
+server {
+    listen 80;
+    server_name notes.liz.coffee;
+
+    location / {
+        proxy_pass https://{{ loadbalancer_ip }};
+        proxy_ssl_verify off;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
-- 
cgit v1.2.3-70-g09d2