Xor290/ansible-mln
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: update

Browse Source
This commit is contained in:
Xor290
2026-08-08 12:04:57 +02:00
parent 56aef1fa9b
commit 8e36acd812
76 changed files with 12710 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
monitoring/ota/nginx.conf
+168
View File
@@ -0,0 +1,168 @@
# =========================================================
# Redirection HTTP -> HTTPS pour les 4 sous-domaines
# (garde /.well-known/acme-challenge/ en clair pour certbot)
# =========================================================
server {
listen 80;
listen [::]:80;
server_name ota-prod.uber-stup.club ota-preprod.uber-stup.club ota-omnex-cli.uber-stup.club ota-omnex-admin.uber-stup.club ota-mobile-prod.uber-stup.club ota-mobile-preprod.uber-stup.club;
location /.well-known/acme-challenge/ {
root /var/www/certbot;
allow all;
}
location / {
return 301 https://$host$request_uri;
}
}
# =========================================================
# ota-prod.uber-stup.club -> conteneur ota-prod:3000
# =========================================================
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name ota-prod.uber-stup.club;
ssl_certificate /etc/nginx/certs/ota-prod.uber-stup.club.crt;
ssl_certificate_key /etc/nginx/certs/ota-prod.uber-stup.club.key;
ssl_protocols TLSv1.2 TLSv1.3;
client_max_body_size 500m;
location / {
proxy_pass http://ota-prod:3000;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
# =========================================================
# ota-preprod.uber-stup.club -> conteneur ota-preprod:3000
# =========================================================
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name ota-preprod.uber-stup.club;
ssl_certificate /etc/nginx/certs/ota-preprod.uber-stup.club.crt;
ssl_certificate_key /etc/nginx/certs/ota-preprod.uber-stup.club.key;
ssl_protocols TLSv1.2 TLSv1.3;
client_max_body_size 500m;
location / {
proxy_pass http://ota-preprod:3000;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
# =========================================================
# ota-omnex-cli.uber-stup.club -> conteneur ota-omnex-cli:3000
# =========================================================
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name ota-omnex-cli.uber-stup.club;
ssl_certificate /etc/nginx/certs/ota-omnex-cli.uber-stup.club.crt;
ssl_certificate_key /etc/nginx/certs/ota-omnex-cli.uber-stup.club.key;
ssl_protocols TLSv1.2 TLSv1.3;
client_max_body_size 500m;
location / {
proxy_pass http://ota-omnex-cli:3000;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
# =========================================================
# ota-omnex-admin.uber-stup.club -> conteneur ota-omnex-admin:3000
# =========================================================
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name ota-omnex-admin.uber-stup.club;
ssl_certificate /etc/nginx/certs/ota-omnex-admin.uber-stup.club.crt;
ssl_certificate_key /etc/nginx/certs/ota-omnex-admin.uber-stup.club.key;
ssl_protocols TLSv1.2 TLSv1.3;
client_max_body_size 500m;
location / {
proxy_pass http://ota-omnex-admin:3000;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
# =========================================================
# ota-mobile-prod.uber-stup.club -> conteneur ota-mobile-prod:3000
# =========================================================
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name ota-mobile-prod.uber-stup.club;
ssl_certificate /etc/nginx/certs/ota-mobile-prod.uber-stup.club.crt;
ssl_certificate_key /etc/nginx/certs/ota-mobile-prod.uber-stup.club.key;
ssl_protocols TLSv1.2 TLSv1.3;
client_max_body_size 500m;
location / {
proxy_pass http://ota-mobile-prod:3000;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
# =========================================================
# ota-mobile-preprod.uber-stup.club -> conteneur ota-mobile-preprod:3000
# =========================================================
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name ota-mobile-preprod.uber-stup.club;
ssl_certificate /etc/nginx/certs/ota-mobile-preprod.uber-stup.club.crt;
ssl_certificate_key /etc/nginx/certs/ota-mobile-preprod.uber-stup.club.key;
ssl_protocols TLSv1.2 TLSv1.3;
client_max_body_size 500m;
location / {
proxy_pass http://ota-mobile-preprod:3000;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}