feat: add basic httpbin services

Used to test connectivity of proxies

.idea/digitalboard.core.iml

@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<module type="PYTHON_MODULE" version="4">
-  <component name="NewModuleRootManager">
-    <content url="file://$MODULE_DIR$" />
-    <orderEntry type="jdk" jdkName="Python 3.13" jdkType="Python SDK" />
-    <orderEntry type="sourceFolder" forTests="false" />
-    <orderEntry type="module" module-name="reference-ansible" />
-  </component>
-</module>

.idea/inspectionProfiles/Project_Default.xml

@@ -1,6 +0,0 @@
-<component name="InspectionProjectProfileManager">
-  <profile version="1.0">
-    <option name="myName" value="Project Default" />
-    <inspection_tool class="Eslint" enabled="true" level="WARNING" enabled_by_default="true" />
-  </profile>
-</component>

.idea/inspectionProfiles/profiles_settings.xml

@@ -1,6 +0,0 @@
-<component name="InspectionProjectProfileManager">
-  <settings>
-    <option name="USE_PROJECT_PROFILE" value="false" />
-    <version value="1.0" />
-  </settings>
-</component>

.idea/material_theme_project_new.xml

@@ -1,12 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="MaterialThemeProjectNewConfig">
-    <option name="metadata">
-      <MTProjectMetadataState>
-        <option name="migrated" value="true" />
-        <option name="pristineConfig" value="false" />
-        <option name="userId" value="6727a2ce:1988652562a:-7ffe" />
-      </MTProjectMetadataState>
-    </option>
-  </component>
-</project>

.idea/misc.xml

@@ -1,7 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="Black">
-    <option name="sdkName" value="Python 3.13" />
-  </component>
-  <component name="ProjectRootManager" version="2" project-jdk-name="Python 3.13" project-jdk-type="Python SDK" />
-</project>

.idea/modules.xml

@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="ProjectModuleManager">
-    <modules>
-      <module fileurl="file://$PROJECT_DIR$/.idea/digitalboard.core.iml" filepath="$PROJECT_DIR$/.idea/digitalboard.core.iml" />
-      <module fileurl="file://$PROJECT_DIR$/../reference-ansible/.idea/reference-ansible.iml" filepath="$PROJECT_DIR$/../reference-ansible/.idea/reference-ansible.iml" />
-    </modules>
-  </component>
-</project>

.idea/vcs.xml

@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="VcsDirectoryMappings">
-    <mapping directory="" vcs="Git" />
-    <mapping directory="$PROJECT_DIR$" vcs="Git" />
-    <mapping directory="$PROJECT_DIR$/../reference-ansible" vcs="Git" />
-  </component>
-</project>

notes-nextcloud

@@ -1,93 +0,0 @@
-version: "3.9"
-
-# ⛵ Nextcloud + Collabora (CODE) behind Traefik (TLS at Traefik)
-# Replace all occurrences of cloud.digitalboard.ch and office.example.com with your domains.
-
-services:
-  db:
-    image: postgres:16-alpine
-    container_name: nextcloud-postgres
-    restart: always
-    environment:
-      POSTGRES_DB: nextcloud
-      POSTGRES_USER: nextcloud
-      POSTGRES_PASSWORD: PVgvn5w06yvN7K8QwKacLrGNtvQformw
-    volumes:
-      - /srv/data/nextcloud/postgresql/data:/var/lib/postgresql/data
-    networks:
-      - internal
-
-  redis:
-    image: redis:7-alpine
-    container_name: nextcloud-redis
-    restart: always
-    command: ["redis-server", "--appendonly", "yes"]
-    volumes:
-      - /srv/data/nextcloud/redis/data:/data
-    networks:
-      - internal
-
-  nextcloud:
-    image: nextcloud:apache
-    container_name: nextcloud
-    restart: always
-    depends_on:
-      - db
-      - redis
-    environment:
-      POSTGRES_HOST: db
-      POSTGRES_DB: nextcloud
-      POSTGRES_USER: nextcloud
-      POSTGRES_PASSWORD: PVgvn5w06yvN7K8QwKacLrGNtvQformw
-      NEXTCLOUD_ADMIN_USER: tinfoil
-      NEXTCLOUD_ADMIN_PASSWORD: Wkcox8ZD05po1rq60Y4h2cIenws7hF7F
-      REDIS_HOST: redis
-      # REDIS_HOST_PASSWORD: ""
-      PHP_MEMORY_LIMIT: 1024M
-      PHP_UPLOAD_LIMIT: 2048M
-      OVERWRITEPROTOCOL: https
-      OVERWRITEHOST: cloud.digitalboard.ch
-      TRUSTED_PROXIES: "172.18.0.0/16"
-    volumes:
-      - /srv/data/nextcloud/nextcloud/:/var/www/html
-      - ./servername.conf:/etc/apache2/conf-enabled/servername.conf
-    networks:
-      - internal
-      - proxy
-    labels:
-      - traefik.enable=true
-      - traefik.docker.network=proxy
-      - traefik.http.routers.nextcloud.rule=Host(`cloud.digitalboard.ch`) 
-      - traefik.http.routers.nextcloud.entrypoints=web
-      - traefik.http.services.nextcloud.loadbalancer.server.port=80
-      # Ensure Nextcloud always sees HTTPS from the double proxy:
-      - traefik.http.middlewares.nc-https.headers.customrequestheaders.X-Forwarded-Proto=https
-      - traefik.http.routers.nextcloud.middlewares=nc-wellknown,nc-https
-      # Well-known DAV:
-      - traefik.http.middlewares.nc-wellknown.redirectregex.permanent=true
-      - traefik.http.middlewares.nc-wellknown.redirectregex.regex=^https?://([^/]+)/.well-known/(card|cal)dav
-      - traefik.http.middlewares.nc-wellknown.redirectregex.replacement=https://$${1}/remote.php/dav/
-
-  collabora:
-    image: collabora/code:latest
-    container_name: collabora
-    restart: always
-    environment:
-      domain: ^cloud\.example\.com$
-      extra_params: --o:ssl.enable=false --o:ssl.termination=true
-      username: admin
-      password: change_me
-    cap_add:
-      - MKNOD
-    networks:
-      - proxy
-    labels:
-      - traefik.enable=true
-      - traefik.http.routers.collabora.rule=Host(`office-intern.example.com`)
-      - traefik.http.routers.collabora.entrypoints=web
-      - traefik.http.services.collabora.loadbalancer.server.port=9980
-
-networks:
-  internal:
-  proxy:
-    external: true

roles/reverseproxy/templates/middlewares.yml.j2

@@ -1,11 +1,47 @@
+{% if enable_dashboard %}
+api:
+  dashboard: true
+  insecure: true
+{% endif %}
+
+{% if enable_access_logs %}
+accessLog:
+  format: {{ access_log_format }}
+{% endif %}
+
+entryPoints:
+  web:
+    address: ":80"
+{% if use_ssl %}
     http:
-  middlewares:
+      redirections:
-    secure-headers:
+        entryPoint:
-      headers:
+          to: websecure
-        frameDeny: true
+          scheme: https
-        contentTypeNosniff: true
+{% endif %}
-        browserXssFilter: true
+  websecure:
-        forceSTSHeader: true
+    address: ":443"
-        stsSeconds: 31536000
+
-        stsIncludeSubdomains: true
+providers:
-        stsPreload: true
+{% if use_static_services | default(false) %}
+  file:
+    filename: /etc/traefik/services.yml
+    watch: true
+{% endif %}
+{% if use_docker_provider | default(true) %}
+  docker:
+    endpoint: "unix:///var/run/docker.sock"
+    exposedByDefault: false
+{% endif %}
+
+certificatesResolvers:
+  letsencrypt:
+    acme:
+      email: admin@digitalboard.ch
+      storage: /letsencrypt/acme.json
+      httpChallenge:
+        entryPoint: web
+
+global:
+  checkNewVersion: false
+  sendAnonymousUsage: false