- Nginx Reverse Proxy
- Generates wildcard certificate for domain with automatic renewal
- Full end to end encryption between (host -> reverse proxy -> app)
- Downstream apps can perform Let's Encrypt certificate renewals through reverse proxy
- Dynamic DNS with AWS
- Wireguard VPN
- Easy client management
-
Create AWS user with programmatic access and the following policy permissions:
route53:ChangeResourceRecordSets route53:ListResourceRecordSets
route53:ListHostedZones route53:GetChange route53:ChangeResourceRecordSets
-
make encrypt_string
to encrypt Wireguard client private keys for hosts.yml -
Update variables in hosts.yml
-
Update variables in vault.yml
-
make vault
to encrypt vault.yml -
make install
to run playbook