Add missing newsreader nginx site

tasks/nginx.yml

@@ -23,6 +23,10 @@
         src: 'templates/nginx/vpn.j2',
         dest: '/etc/nginx/sites-available/vpn',
       }
+    - {
+        src: 'templates/nginx/newsreader.j2',
+        dest: '/etc/nginx/sites-available/newsreader',
+      }
 
 - name: create configuration links
   become: true
@@ -47,4 +51,8 @@
         src: '/etc/nginx/sites-available/vpn',
         dest: '/etc/nginx/sites-enabled/vpn',
       }
+    - {
+        src: '/etc/nginx/sites-available/newsreader',
+        dest: '/etc/nginx/sites-enabled/newsreader',
+      }
   notify: restart nginx

templates/nginx/newsreader.j2

@@ -0,0 +1,29 @@
+# {{ ansible_managed }} {{ ansible_date_time.time }} {{ ansible_date_time.date }}
+
+server {
+	listen {{ https_port }} ssl;
+	server_name {{ newsreader_domain }};
+
+	include snippets/certificates.conf;
+	include snippets/ssl-params.conf;
+
+	access_log /var/log/nginx/newsreader.log;
+	error_log /var/log/nginx/newsreader.log;
+
+	location / {
+		gzip off;
+
+		proxy_read_timeout      90;
+		proxy_connect_timeout   90;
+		proxy_redirect          off;
+
+		proxy_set_header Host 			$host;
+		proxy_set_header X-Real-IP 		$remote_addr;
+		proxy_set_header X-Forwarded-For   	$proxy_add_x_forwarded_for;
+		proxy_set_header X-Forwarded-Ssl     	on;
+		proxy_set_header X-Forwarded-Proto 	$scheme;
+		proxy_set_header X-Frame-Options 	SAMEORIGIN;
+
+		proxy_pass 				https://{{ newsreader_ip }};
+	}
+}

vars/network.yml

@@ -7,6 +7,7 @@ nfs_port: 2049
 
 gitlab_ip: '192.168.178.88'
 sentry_ip: '192.168.178.73'
+newsreader_ip: '192.168.178.63'
 
 radicale_listen_addres: '127.0.0.1'
 radicale_port: 5232

vars/nginx.yml

@@ -1,3 +1,4 @@
 domain_name: 'fudiggity.nl'
 gitlab_domain: 'git.fudiggity.nl'
 sentry_domain: 'sentry.fudiggity.nl'
+newsreader_domain: 'rss.fudiggity.nl'