2ba0c07cd3
Addresses the WKS PoC review (Notion 2026-05-26). All docs in English. - README: purpose, docs table of contents, annotated repo tree - docs/getting_started.md: prerequisites (WKS account, OIDC, SSH, VPN) + first deploy - docs/ansible.md: playbook table, "Running Ansible", service parameters, cheatsheet - docs/secrets.md: canonical Bao login (moved out of README) + demo defaults - docs/operations.md: full Makefile reference - docs/inventories.md: repo layout, topology, standard folder structure, walkthrough - docs/testing.md: static checks, inventory resolution, smoke test / dry run - remove ARCHITECTURE.md (architecture docs live externally) Also includes the gymburgdorf inventory build-out (bookstack, homarr, opnform, send) and scripts/bao-seed.sh. site.yml keeps a third traefik play (traefik_servers minus the vagrant _dmz/_backend split) so the demo inventories still configure their reverse proxy after the rebase onto main.
46 lines
1.3 KiB
YAML
46 lines
1.3 KiB
YAML
---
|
|
# Services hosted on `application` that the DMZ reverseproxy should
|
|
# forward public traffic to. The DMZ traefik picks this up via
|
|
# hostvars[backend].traefik_dmz_exposed_services and renders a router +
|
|
# service for each entry into /config/services.yml.
|
|
traefik_dmz_exposed_services:
|
|
- name: authentik
|
|
domain: auth.gymb.souveredu.ch
|
|
backend_host: auth.int.gymb.souveredu.ch
|
|
port: 443
|
|
protocol: https
|
|
- name: nextcloud
|
|
domain: cloud.gymb.souveredu.ch
|
|
backend_host: cloud.int.gymb.souveredu.ch
|
|
port: 443
|
|
protocol: https
|
|
- name: collabora
|
|
domain: office.gymb.souveredu.ch
|
|
backend_host: office.int.gymb.souveredu.ch
|
|
port: 443
|
|
protocol: https
|
|
- name: drawio
|
|
domain: draw.gymb.souveredu.ch
|
|
backend_host: draw.int.gymb.souveredu.ch
|
|
port: 443
|
|
protocol: https
|
|
- name: send
|
|
domain: send.gymb.souveredu.ch
|
|
backend_host: send.int.gymb.souveredu.ch
|
|
port: 443
|
|
protocol: https
|
|
- name: opnform
|
|
domain: forms.gymb.souveredu.ch
|
|
backend_host: forms.int.gymb.souveredu.ch
|
|
port: 443
|
|
protocol: https
|
|
- name: homarr
|
|
domain: home.gymb.souveredu.ch
|
|
backend_host: home.int.gymb.souveredu.ch
|
|
port: 443
|
|
protocol: https
|
|
- name: bookstack
|
|
domain: wiki.gymb.souveredu.ch
|
|
backend_host: wiki.int.gymb.souveredu.ch
|
|
port: 443
|
|
protocol: https
|