/reverse_proxy_mklist

Set ansible facts for stuvusIT reverse_proxy role

Primary LanguagePythonCreative Commons Attribution Share Alike 4.0 InternationalCC-BY-SA-4.0

reverse_proxy_mklist

This role generates a proper list for our reverse proxy role based on all host and group vars.

Requirements

A running webserver at all target hosts, see reverse proxy for future information.

Role Variables

At host or group vars, where this script is applied (the host that runs the reverse proxy)

Option Type Default Description Required
ignore_hosts list of strings [] list of ansible hosts to ignore N
reverse_proxy_mklist_host_suffix string Suffix to append to all hostnames if hosts are accessed via hostname

At host vars, who serve some sites (target server)

Option Type Default Description Required
served_domains list of dicts See reverse_proxy for possible values Y
reverse_proxy_mklist_via_ip boolean false Whether this host should be contacted via IP instead of the hostname N

Inside the served_domains of a host

Option Type Default Description Required
reverse_proxy_skip boolean false Skip this served domain from generation N

Example Playbook

Vars:

reverse_proxy_server01.yml:

description: Reverse Proxy
letsencrypt_email: fuu@example.com
default_url: https://stuvus.uni-stuttgart.de
domain_prefixes:
  - www
domain_suffixes:
  - example.com

web01.yml:

description: Webserver 1 for public usage ( testing )
served_domains:
  - domains:
    - test
    - test.test
interfaces:
  - mac: AA:AA:AA:11:11:11
    ip: 192.168.0.2

web02.yml:

description: Webserver 2 for internal and public usage
served_domains:
  - domains:
    - intern
    auth: true
  - domains:
    - public
    auth: true
interfaces:
  - mac: AA:AA:AA:11:11:22
    ip: 192.168.0.3

Result

The configuration files above, will be result in the following configuration for reverse_proxy_sever01:

description: Reverse Proxy
letsencrypt_email: fuu@example.com
default_url: https://stuvus.uni-stuttgart.de
domain_prefixes:
  - www
domain_suffixes:
  - example.com
proxy_domains:
  - target_description: Webserver 1 for public usage ( testing )
    target_host: web01
    target_ip: 192.168.0.2
    served_domains:
      - domains:
        - test
        - test.test
  - target_description: Webserver 2 for internal and public usage
served_domains:
  - domains:
    - intern
    auth: true
  - domains:
    - public
    auth: true

License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.

Author Information