diff --git a/tasks/nginx.yml b/tasks/nginx.yml index 9a92e70..0849351 100644 --- a/tasks/nginx.yml +++ b/tasks/nginx.yml @@ -23,6 +23,10 @@ src: 'templates/nginx/vpn.j2', dest: '/etc/nginx/sites-available/vpn', } + - { + src: 'templates/nginx/newsreader.j2', + dest: '/etc/nginx/sites-available/newsreader', + } - name: create configuration links become: true @@ -47,4 +51,8 @@ src: '/etc/nginx/sites-available/vpn', dest: '/etc/nginx/sites-enabled/vpn', } + - { + src: '/etc/nginx/sites-available/newsreader', + dest: '/etc/nginx/sites-enabled/newsreader', + } notify: restart nginx diff --git a/templates/nginx/newsreader.j2 b/templates/nginx/newsreader.j2 new file mode 100644 index 0000000..53742d9 --- /dev/null +++ b/templates/nginx/newsreader.j2 @@ -0,0 +1,29 @@ +# {{ ansible_managed }} {{ ansible_date_time.time }} {{ ansible_date_time.date }} + +server { + listen {{ https_port }} ssl; + server_name {{ newsreader_domain }}; + + include snippets/certificates.conf; + include snippets/ssl-params.conf; + + access_log /var/log/nginx/newsreader.log; + error_log /var/log/nginx/newsreader.log; + + location / { + gzip off; + + proxy_read_timeout 90; + proxy_connect_timeout 90; + proxy_redirect off; + + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Ssl on; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Frame-Options SAMEORIGIN; + + proxy_pass https://{{ newsreader_ip }}; + } +} diff --git a/vars/network.yml b/vars/network.yml index c21d386..6d142f5 100644 --- a/vars/network.yml +++ b/vars/network.yml @@ -7,6 +7,7 @@ nfs_port: 2049 gitlab_ip: '192.168.178.88' sentry_ip: '192.168.178.73' +newsreader_ip: '192.168.178.63' radicale_listen_addres: '127.0.0.1' radicale_port: 5232 diff --git a/vars/nginx.yml b/vars/nginx.yml index 2f72f3c..b90b75c 100644 --- a/vars/nginx.yml +++ b/vars/nginx.yml @@ -1,3 +1,4 @@ domain_name: 'fudiggity.nl' gitlab_domain: 'git.fudiggity.nl' sentry_domain: 'sentry.fudiggity.nl' +newsreader_domain: 'rss.fudiggity.nl'