diff --git a/roles/webgateway/templates/nginx.conf b/roles/webgateway/templates/nginx.conf index 903761a..2849714 100644 --- a/roles/webgateway/templates/nginx.conf +++ b/roles/webgateway/templates/nginx.conf @@ -81,7 +81,9 @@ http { {%- endif %} location /{ proxy_pass https://{{ proxysite.ip }}; + {-% if proxysite.ignorecert %} proxy_ssl_verify off; + {%- endif %} } location /metrics{ proxy_pass https://{{ proxysite.ip }}; diff --git a/roles/webgateway/vars/main.yaml b/roles/webgateway/vars/main.yaml index d080820..d7208fe 100644 --- a/roles/webgateway/vars/main.yaml +++ b/roles/webgateway/vars/main.yaml @@ -1,19 +1,19 @@ proxy: - - {domain: bitwarden.tormakristof.eu, ip: bitwarden.intra.tormakris.dev, bigrequests: false} - - {domain: nextcloud.tormakristof.eu, ip: nextcloud.intra.tormakris.dev, bigrequests: true} - - {domain: drone.kmlabz.com, ip: drone.intra.tormakris.dev, bigrequests: false} - - {domain: git.kmlabz.com, ip: git.intra.tormakris.dev, bigrequests: false} - - {domain: guacamole.tormakristof.eu, ip: guacamole.intra.tormakris.dev, bigrequests: false} - - {domain: matrix.tormakristof.eu, ip: matrix.intra.tormakris.dev, bigrequests: true} - - {domain: chat.tormakristof.eu, ip: matrix.intra.tormakris.dev, bigrequests: true} - - {domain: nexus.kmlabz.com, ip: nexus.intra.tormakris.dev, bigrequests: true} - - {domain: registry.kmlabz.com, ip: nexus.intra.tormakris.dev, bigrequests: true} - - {domain: fs.tormakristof.eu, ip: adfs.intra.tormakris.dev, bigrequests: false} - - {domain: certauth.fs.tormakristof.eu, ip: adfs.intra.tormakris.dev, bigrequests: false} - - {domain: grafana.tormakristof.eu, ip: monitoring.intra.tormakris.dev, bigrequests: false} - - {domain: yt.tormakristof.eu, ip: ytmirror.intra.tormakris.dev, bigrequests: false} - - {domain: mastodon.tormakristof.eu, ip: mastodon.intra.tormakris.dev, bigrequests: true} - - {domain: speedtest.tormakristof.eu, ip: librespeed.intra.tormakris.dev, bigrequests: true} + - {domain: bitwarden.tormakristof.eu, ip: bitwarden.intra.tormakris.dev, bigrequests: false, ignorecert: false} + - {domain: nextcloud.tormakristof.eu, ip: nextcloud.intra.tormakris.dev, bigrequests: true, ignorecert: false} + - {domain: drone.kmlabz.com, ip: drone.intra.tormakris.dev, bigrequests: false, ignorecert: false} + - {domain: git.kmlabz.com, ip: git.intra.tormakris.dev, bigrequests: false, ignorecert: false} + - {domain: guacamole.tormakristof.eu, ip: guacamole.intra.tormakris.dev, bigrequests: false, ignorecert: false} + - {domain: matrix.tormakristof.eu, ip: matrix.intra.tormakris.dev, bigrequests: true, ignorecert: false} + - {domain: chat.tormakristof.eu, ip: matrix.intra.tormakris.dev, bigrequests: true, ignorecert: false} + - {domain: nexus.kmlabz.com, ip: nexus.intra.tormakris.dev, bigrequests: true, ignorecert: false} + - {domain: registry.kmlabz.com, ip: nexus.intra.tormakris.dev, bigrequests: true, ignorecert: false} + - {domain: fs.tormakristof.eu, ip: adfs.intra.tormakris.dev, bigrequests: false, ignorecert: true} + - {domain: certauth.fs.tormakristof.eu, ip: adfs.intra.tormakris.dev, bigrequests: false, ignorecert: true} + - {domain: grafana.tormakristof.eu, ip: monitoring.intra.tormakris.dev, bigrequests: false, ignorecert: false} + - {domain: yt.tormakristof.eu, ip: ytmirror.intra.tormakris.dev, bigrequests: false, ignorecert: false} + - {domain: mastodon.tormakristof.eu, ip: mastodon.intra.tormakris.dev, bigrequests: true, ignorecert: false} + - {domain: speedtest.tormakristof.eu, ip: librespeed.intra.tormakris.dev, bigrequests: true, ignorecert: false} static: []