chore: rename reverseproxy role to traffic

in case we get a nginx role oa in the future
This commit is contained in:
Bert-Jan Fikse 2025-11-07 15:03:56 +01:00
parent 24b4f291a3
commit 69bc95b992
Signed by: bert-jan
GPG key ID: C1E0AB516AC16D1A
12 changed files with 19 additions and 19 deletions

View file

@ -1,20 +1,20 @@
#SPDX-License-Identifier: MIT-0
---
# defaults file for reverseproxy
# defaults file for traefik
# Base directory configuration (inherited from base role or defined here)
docker_compose_base_dir: /etc/docker/compose
docker_volume_base_dir: /srv/data
# Service-specific configuration
service_name: reverseproxy
service_name: traefik
docker_compose_dir: "{{ docker_compose_base_dir }}/{{ service_name }}"
docker_volume_dir: "{{ docker_volume_base_dir }}/{{ service_name }}"
# Deployment mode: 'dmz' or 'backend'
# - dmz: Public-facing reverse proxy that routes to backend servers using file provider
# - backend: Application server with docker provider for local container discovery
reverseproxy_mode: "backend"
traefik_mode: "backend"
# SSL configuration
use_ssl: true
@ -52,7 +52,7 @@ traefik_network: "proxy"
# Services to expose (defined by application roles via host_vars or group_vars)
# Each backend server should define this variable with their services
# reverseproxy_services:
# traefik_services:
# - name: httpbin
# domain: httpbin.example.com
# port: 8080

View file

@ -1,6 +1,6 @@
#SPDX-License-Identifier: MIT-0
---
# handlers file for reverseproxy
# handlers file for traefik
- name: restart traefik
community.docker.docker_compose_v2:

View file

@ -1,23 +1,23 @@
#SPDX-License-Identifier: MIT-0
---
# tasks file for reverseproxy
# tasks file for traefik
- name: Determine which backend servers to proxy (DMZ mode)
set_fact:
_backend_servers: "{{ backend_servers_to_proxy if backend_servers_to_proxy | length > 0 else groups['backend_servers'] | default([]) }}"
when: reverseproxy_mode == 'dmz'
when: traefik_mode == 'dmz'
- name: Build service registry from backend servers (DMZ mode)
set_fact:
proxied_services: "{{ proxied_services | default([]) + hostvars[item].reverseproxy_services | default([]) | map('combine', {'backend_host': hostvars[item].ansible_host | default(item)}) | list }}"
proxied_services: "{{ proxied_services | default([]) + hostvars[item].traefik_services | default([]) | map('combine', {'backend_host': hostvars[item].ansible_host | default(item)}) | list }}"
loop: "{{ _backend_servers | default([]) }}"
when: reverseproxy_mode == 'dmz'
when: traefik_mode == 'dmz'
- name: Debug service registry
debug:
var: proxied_services
when:
- reverseproxy_mode == 'dmz'
- traefik_mode == 'dmz'
- proxied_services is defined
- name: Create docker compose directory
@ -37,7 +37,7 @@
path: "{{ docker_volume_dir }}/config"
state: directory
mode: '0755'
when: reverseproxy_mode == 'dmz'
when: traefik_mode == 'dmz'
- name: Create letsencrypt directory
file:
@ -64,7 +64,7 @@
dest: "{{ docker_volume_dir }}/config/services.yml"
mode: '0644'
notify: restart traefik
when: reverseproxy_mode == 'dmz'
when: traefik_mode == 'dmz'
- name: Create docker-compose file for traefik
template:

View file

@ -1,7 +1,7 @@
services:
traefik:
image: traefik:latest
container_name: reverseproxy
container_name: traefik
restart: always
{% if cert_mode == 'acme' %}
environment:
@ -24,10 +24,10 @@ services:
{% if cert_mode == 'acme' %}
- {{ docker_volume_dir }}/letsencrypt:/letsencrypt
{% endif %}
{% if reverseproxy_mode == 'dmz' %}
{% if traefik_mode == 'dmz' %}
- {{ docker_volume_dir }}/config:/config:ro
{% endif %}
{% if reverseproxy_mode == 'backend' %}
{% if traefik_mode == 'backend' %}
- /var/run/docker.sock:/var/run/docker.sock:ro
{% endif %}
networks:

View file

@ -26,12 +26,12 @@ entryPoints:
address: ":443"
providers:
{% if reverseproxy_mode == 'dmz' %}
{% if traefik_mode == 'dmz' %}
file:
directory: /config
watch: true
{% endif %}
{% if reverseproxy_mode == 'backend' %}
{% if traefik_mode == 'backend' %}
docker:
endpoint: "unix:///var/run/docker.sock"
network: {{ traefik_network }}

View file

@ -3,4 +3,4 @@
- hosts: localhost
remote_user: root
roles:
- reverseproxy
- traefik

View file

@ -1,3 +1,3 @@
#SPDX-License-Identifier: MIT-0
---
# vars file for reverseproxy
# vars file for traefik