chore: rename reverseproxy role to traffic
in case we get a nginx role oa in the future
This commit is contained in:
parent
24b4f291a3
commit
69bc95b992
12 changed files with 19 additions and 19 deletions
|
|
@ -1,20 +1,20 @@
|
|||
#SPDX-License-Identifier: MIT-0
|
||||
---
|
||||
# defaults file for reverseproxy
|
||||
# defaults file for traefik
|
||||
|
||||
# Base directory configuration (inherited from base role or defined here)
|
||||
docker_compose_base_dir: /etc/docker/compose
|
||||
docker_volume_base_dir: /srv/data
|
||||
|
||||
# Service-specific configuration
|
||||
service_name: reverseproxy
|
||||
service_name: traefik
|
||||
docker_compose_dir: "{{ docker_compose_base_dir }}/{{ service_name }}"
|
||||
docker_volume_dir: "{{ docker_volume_base_dir }}/{{ service_name }}"
|
||||
|
||||
# Deployment mode: 'dmz' or 'backend'
|
||||
# - dmz: Public-facing reverse proxy that routes to backend servers using file provider
|
||||
# - backend: Application server with docker provider for local container discovery
|
||||
reverseproxy_mode: "backend"
|
||||
traefik_mode: "backend"
|
||||
|
||||
# SSL configuration
|
||||
use_ssl: true
|
||||
|
|
@ -52,7 +52,7 @@ traefik_network: "proxy"
|
|||
|
||||
# Services to expose (defined by application roles via host_vars or group_vars)
|
||||
# Each backend server should define this variable with their services
|
||||
# reverseproxy_services:
|
||||
# traefik_services:
|
||||
# - name: httpbin
|
||||
# domain: httpbin.example.com
|
||||
# port: 8080
|
||||
|
|
@ -1,6 +1,6 @@
|
|||
#SPDX-License-Identifier: MIT-0
|
||||
---
|
||||
# handlers file for reverseproxy
|
||||
# handlers file for traefik
|
||||
|
||||
- name: restart traefik
|
||||
community.docker.docker_compose_v2:
|
||||
|
|
@ -1,23 +1,23 @@
|
|||
#SPDX-License-Identifier: MIT-0
|
||||
---
|
||||
# tasks file for reverseproxy
|
||||
# tasks file for traefik
|
||||
|
||||
- name: Determine which backend servers to proxy (DMZ mode)
|
||||
set_fact:
|
||||
_backend_servers: "{{ backend_servers_to_proxy if backend_servers_to_proxy | length > 0 else groups['backend_servers'] | default([]) }}"
|
||||
when: reverseproxy_mode == 'dmz'
|
||||
when: traefik_mode == 'dmz'
|
||||
|
||||
- name: Build service registry from backend servers (DMZ mode)
|
||||
set_fact:
|
||||
proxied_services: "{{ proxied_services | default([]) + hostvars[item].reverseproxy_services | default([]) | map('combine', {'backend_host': hostvars[item].ansible_host | default(item)}) | list }}"
|
||||
proxied_services: "{{ proxied_services | default([]) + hostvars[item].traefik_services | default([]) | map('combine', {'backend_host': hostvars[item].ansible_host | default(item)}) | list }}"
|
||||
loop: "{{ _backend_servers | default([]) }}"
|
||||
when: reverseproxy_mode == 'dmz'
|
||||
when: traefik_mode == 'dmz'
|
||||
|
||||
- name: Debug service registry
|
||||
debug:
|
||||
var: proxied_services
|
||||
when:
|
||||
- reverseproxy_mode == 'dmz'
|
||||
- traefik_mode == 'dmz'
|
||||
- proxied_services is defined
|
||||
|
||||
- name: Create docker compose directory
|
||||
|
|
@ -37,7 +37,7 @@
|
|||
path: "{{ docker_volume_dir }}/config"
|
||||
state: directory
|
||||
mode: '0755'
|
||||
when: reverseproxy_mode == 'dmz'
|
||||
when: traefik_mode == 'dmz'
|
||||
|
||||
- name: Create letsencrypt directory
|
||||
file:
|
||||
|
|
@ -64,7 +64,7 @@
|
|||
dest: "{{ docker_volume_dir }}/config/services.yml"
|
||||
mode: '0644'
|
||||
notify: restart traefik
|
||||
when: reverseproxy_mode == 'dmz'
|
||||
when: traefik_mode == 'dmz'
|
||||
|
||||
- name: Create docker-compose file for traefik
|
||||
template:
|
||||
|
|
@ -1,7 +1,7 @@
|
|||
services:
|
||||
traefik:
|
||||
image: traefik:latest
|
||||
container_name: reverseproxy
|
||||
container_name: traefik
|
||||
restart: always
|
||||
{% if cert_mode == 'acme' %}
|
||||
environment:
|
||||
|
|
@ -24,10 +24,10 @@ services:
|
|||
{% if cert_mode == 'acme' %}
|
||||
- {{ docker_volume_dir }}/letsencrypt:/letsencrypt
|
||||
{% endif %}
|
||||
{% if reverseproxy_mode == 'dmz' %}
|
||||
{% if traefik_mode == 'dmz' %}
|
||||
- {{ docker_volume_dir }}/config:/config:ro
|
||||
{% endif %}
|
||||
{% if reverseproxy_mode == 'backend' %}
|
||||
{% if traefik_mode == 'backend' %}
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
{% endif %}
|
||||
networks:
|
||||
|
|
@ -26,12 +26,12 @@ entryPoints:
|
|||
address: ":443"
|
||||
|
||||
providers:
|
||||
{% if reverseproxy_mode == 'dmz' %}
|
||||
{% if traefik_mode == 'dmz' %}
|
||||
file:
|
||||
directory: /config
|
||||
watch: true
|
||||
{% endif %}
|
||||
{% if reverseproxy_mode == 'backend' %}
|
||||
{% if traefik_mode == 'backend' %}
|
||||
docker:
|
||||
endpoint: "unix:///var/run/docker.sock"
|
||||
network: {{ traefik_network }}
|
||||
|
|
@ -3,4 +3,4 @@
|
|||
- hosts: localhost
|
||||
remote_user: root
|
||||
roles:
|
||||
- reverseproxy
|
||||
- traefik
|
||||
|
|
@ -1,3 +1,3 @@
|
|||
#SPDX-License-Identifier: MIT-0
|
||||
---
|
||||
# vars file for reverseproxy
|
||||
# vars file for traefik
|
||||
Loading…
Add table
Add a link
Reference in a new issue