diff --git a/roles/reverseproxy/README.md b/roles/traefik/README.md similarity index 100% rename from roles/reverseproxy/README.md rename to roles/traefik/README.md diff --git a/roles/reverseproxy/defaults/main.yml b/roles/traefik/defaults/main.yml similarity index 95% rename from roles/reverseproxy/defaults/main.yml rename to roles/traefik/defaults/main.yml index 7e3743d..489ee60 100644 --- a/roles/reverseproxy/defaults/main.yml +++ b/roles/traefik/defaults/main.yml @@ -1,20 +1,20 @@ #SPDX-License-Identifier: MIT-0 --- -# defaults file for reverseproxy +# defaults file for traefik # Base directory configuration (inherited from base role or defined here) docker_compose_base_dir: /etc/docker/compose docker_volume_base_dir: /srv/data # Service-specific configuration -service_name: reverseproxy +service_name: traefik docker_compose_dir: "{{ docker_compose_base_dir }}/{{ service_name }}" docker_volume_dir: "{{ docker_volume_base_dir }}/{{ service_name }}" # Deployment mode: 'dmz' or 'backend' # - dmz: Public-facing reverse proxy that routes to backend servers using file provider # - backend: Application server with docker provider for local container discovery -reverseproxy_mode: "backend" +traefik_mode: "backend" # SSL configuration use_ssl: true @@ -52,7 +52,7 @@ traefik_network: "proxy" # Services to expose (defined by application roles via host_vars or group_vars) # Each backend server should define this variable with their services -# reverseproxy_services: +# traefik_services: # - name: httpbin # domain: httpbin.example.com # port: 8080 diff --git a/roles/reverseproxy/handlers/main.yml b/roles/traefik/handlers/main.yml similarity index 83% rename from roles/reverseproxy/handlers/main.yml rename to roles/traefik/handlers/main.yml index ad1a25d..4abd95a 100644 --- a/roles/reverseproxy/handlers/main.yml +++ b/roles/traefik/handlers/main.yml @@ -1,6 +1,6 @@ #SPDX-License-Identifier: MIT-0 --- -# handlers file for reverseproxy +# handlers file for traefik - name: restart traefik community.docker.docker_compose_v2: diff --git a/roles/reverseproxy/meta/main.yml b/roles/traefik/meta/main.yml similarity index 100% rename from roles/reverseproxy/meta/main.yml rename to roles/traefik/meta/main.yml diff --git a/roles/reverseproxy/tasks/main.yml b/roles/traefik/tasks/main.yml similarity index 84% rename from roles/reverseproxy/tasks/main.yml rename to roles/traefik/tasks/main.yml index 3721b3d..ab3aed7 100644 --- a/roles/reverseproxy/tasks/main.yml +++ b/roles/traefik/tasks/main.yml @@ -1,23 +1,23 @@ #SPDX-License-Identifier: MIT-0 --- -# tasks file for reverseproxy +# tasks file for traefik - name: Determine which backend servers to proxy (DMZ mode) set_fact: _backend_servers: "{{ backend_servers_to_proxy if backend_servers_to_proxy | length > 0 else groups['backend_servers'] | default([]) }}" - when: reverseproxy_mode == 'dmz' + when: traefik_mode == 'dmz' - name: Build service registry from backend servers (DMZ mode) set_fact: - proxied_services: "{{ proxied_services | default([]) + hostvars[item].reverseproxy_services | default([]) | map('combine', {'backend_host': hostvars[item].ansible_host | default(item)}) | list }}" + proxied_services: "{{ proxied_services | default([]) + hostvars[item].traefik_services | default([]) | map('combine', {'backend_host': hostvars[item].ansible_host | default(item)}) | list }}" loop: "{{ _backend_servers | default([]) }}" - when: reverseproxy_mode == 'dmz' + when: traefik_mode == 'dmz' - name: Debug service registry debug: var: proxied_services when: - - reverseproxy_mode == 'dmz' + - traefik_mode == 'dmz' - proxied_services is defined - name: Create docker compose directory @@ -37,7 +37,7 @@ path: "{{ docker_volume_dir }}/config" state: directory mode: '0755' - when: reverseproxy_mode == 'dmz' + when: traefik_mode == 'dmz' - name: Create letsencrypt directory file: @@ -64,7 +64,7 @@ dest: "{{ docker_volume_dir }}/config/services.yml" mode: '0644' notify: restart traefik - when: reverseproxy_mode == 'dmz' + when: traefik_mode == 'dmz' - name: Create docker-compose file for traefik template: diff --git a/roles/reverseproxy/templates/docker-compose.yml.j2 b/roles/traefik/templates/docker-compose.yml.j2 similarity index 90% rename from roles/reverseproxy/templates/docker-compose.yml.j2 rename to roles/traefik/templates/docker-compose.yml.j2 index 9c1cc93..288e693 100644 --- a/roles/reverseproxy/templates/docker-compose.yml.j2 +++ b/roles/traefik/templates/docker-compose.yml.j2 @@ -1,7 +1,7 @@ services: traefik: image: traefik:latest - container_name: reverseproxy + container_name: traefik restart: always {% if cert_mode == 'acme' %} environment: @@ -24,10 +24,10 @@ services: {% if cert_mode == 'acme' %} - {{ docker_volume_dir }}/letsencrypt:/letsencrypt {% endif %} -{% if reverseproxy_mode == 'dmz' %} +{% if traefik_mode == 'dmz' %} - {{ docker_volume_dir }}/config:/config:ro {% endif %} -{% if reverseproxy_mode == 'backend' %} +{% if traefik_mode == 'backend' %} - /var/run/docker.sock:/var/run/docker.sock:ro {% endif %} networks: diff --git a/roles/reverseproxy/templates/middlewares.yml.j2 b/roles/traefik/templates/middlewares.yml.j2 similarity index 100% rename from roles/reverseproxy/templates/middlewares.yml.j2 rename to roles/traefik/templates/middlewares.yml.j2 diff --git a/roles/reverseproxy/templates/services.yml.j2 b/roles/traefik/templates/services.yml.j2 similarity index 100% rename from roles/reverseproxy/templates/services.yml.j2 rename to roles/traefik/templates/services.yml.j2 diff --git a/roles/reverseproxy/templates/traefik.yml.j2 b/roles/traefik/templates/traefik.yml.j2 similarity index 93% rename from roles/reverseproxy/templates/traefik.yml.j2 rename to roles/traefik/templates/traefik.yml.j2 index cd3d878..f89d7a3 100644 --- a/roles/reverseproxy/templates/traefik.yml.j2 +++ b/roles/traefik/templates/traefik.yml.j2 @@ -26,12 +26,12 @@ entryPoints: address: ":443" providers: -{% if reverseproxy_mode == 'dmz' %} +{% if traefik_mode == 'dmz' %} file: directory: /config watch: true {% endif %} -{% if reverseproxy_mode == 'backend' %} +{% if traefik_mode == 'backend' %} docker: endpoint: "unix:///var/run/docker.sock" network: {{ traefik_network }} diff --git a/roles/reverseproxy/tests/inventory b/roles/traefik/tests/inventory similarity index 100% rename from roles/reverseproxy/tests/inventory rename to roles/traefik/tests/inventory diff --git a/roles/reverseproxy/tests/test.yml b/roles/traefik/tests/test.yml similarity index 81% rename from roles/reverseproxy/tests/test.yml rename to roles/traefik/tests/test.yml index ca2387c..0d6a6ac 100644 --- a/roles/reverseproxy/tests/test.yml +++ b/roles/traefik/tests/test.yml @@ -3,4 +3,4 @@ - hosts: localhost remote_user: root roles: - - reverseproxy + - traefik diff --git a/roles/reverseproxy/vars/main.yml b/roles/traefik/vars/main.yml similarity index 55% rename from roles/reverseproxy/vars/main.yml rename to roles/traefik/vars/main.yml index dcbcceb..46605c4 100644 --- a/roles/reverseproxy/vars/main.yml +++ b/roles/traefik/vars/main.yml @@ -1,3 +1,3 @@ #SPDX-License-Identifier: MIT-0 --- -# vars file for reverseproxy +# vars file for traefik