RedXen
/
aports
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add services and adapt haproxy config

This commit is contained in:
Alex D. 2021-02-17 15:32:10 +00:00
parent 37e987a79c
commit 94c273e368
Signed by: caskd
GPG Key ID: F92BA85F61F4C173
4 changed files with 50 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
config/haproxy/APKBUILD
View File

@ -4,8 +4,8 @@ _svcname=haproxy
. ../APKBUILD-config.common . ../APKBUILD-config.common
pkgver=2021.01.30 pkgver=2021.02.17
pkgrel=2 pkgrel=1
depends="redxen-secret-letsencrypt-full redxen-data-haproxy-errorpages" depends="redxen-secret-letsencrypt-full redxen-data-haproxy-errorpages"
#checkdepends="haproxy" #checkdepends="haproxy"
source="main.cfg" source="main.cfg"
@ -14,4 +14,4 @@ source="main.cfg"
# haproxy -c -f main.cfg # Certificates aren't readable by the building user # haproxy -c -f main.cfg # Certificates aren't readable by the building user
#} #}
sha512sums="4dde4c5a43c83668a812225907e3e588fe9e9d3ee93be0b119641d754b6c7c9cba37c4e045a1d42304106e7c43bf0ccc9fd21bdfb9377579f9f8466e38819731 main.cfg" sha512sums="1caa12adfffcc33ede82c53471c54100908034f869febcced5bf60d6ed8f2fd0fdd5168621d41b454ee83f52da5be69c5849a38834cd1d6a2da9eb1a2ded9982 main.cfg"

17
config/haproxy/main.cfg
View File

@ -52,15 +52,16 @@ frontend http
acl root path / acl root path /
redirect prefix /web code 302 if { hdr_beg(host) -i seed } root acl seedbox hdr_beg(host) -i seed.redxen
use_backend backend-transmission if { hdr_beg(host) -i seed } use_backend backend-transmission if seedbox
redirect prefix /web code 302 if seedbox root
use_backend backend-root if { hdr(host) -i redxen.eu } use_backend backend-root if { hdr_beg(host) -i redxen }
use_backend backend-grafana if { hdr_beg(host) -i stats } use_backend backend-grafana if { hdr_beg(host) -i stats.redxen }
# use_backend backend-pleroma if { hdr_beg(host) -i social } # use_backend backend-pleroma if { hdr_beg(host) -i social.redxen }
use_backend backend-gitea if { hdr_beg(host) -i git } use_backend backend-gitea if { hdr_beg(host) -i git.redxen }
use_backend backend-seedown if { hdr_beg(host) -i sd } use_backend backend-seedown if { hdr_beg(host) -i sd.redxen }
use_backend backend-packages if { hdr_beg(host) -i packages } use_backend backend-packages if { hdr_beg(host) -i packages.redxen }
http-response set-header X-Forwarded-Proto https http-response set-header X-Forwarded-Proto https
http-response set-header X-XSS-Protection 1;\ mode=block http-response set-header X-XSS-Protection 1;\ mode=block

4
config/unbound/APKBUILD
View File

@ -5,7 +5,7 @@ _svcname=unbound
. ../APKBUILD-config.common . ../APKBUILD-config.common
pkgver=2021.02.17 pkgver=2021.02.17
pkgrel=2 pkgrel=4
depends="alpine-baselayout ca-certificates-bundle dns-root-hints dnssec-root" depends="alpine-baselayout ca-certificates-bundle dns-root-hints dnssec-root"
makedepends="redxen-secret-opendkim-dns" makedepends="redxen-secret-opendkim-dns"
checkdepends="bind-tools unbound" checkdepends="bind-tools unbound"
@ -73,4 +73,4 @@ d94ad338e2ea43c3ecdc62c861eddc0bb706807b738dd985309bcdf0b5fb435d7260bf272e2bbe40
28c917fe7f69643887097553312c4f1ffc747dffdbf150430e6c4b2e5833567922810716cb59a27887915664777ac3263be3c826956f504499f0ebdcc0b3aac5 auth-redxen.conf 28c917fe7f69643887097553312c4f1ffc747dffdbf150430e6c4b2e5833567922810716cb59a27887915664777ac3263be3c826956f504499f0ebdcc0b3aac5 auth-redxen.conf
91847e65c48e585f298bb766b2b20c43f5380686b594233da3b722962b03f2f4c858bf299b745027dadd184408a87b1e85ebf03b027196756455afea69f79cf9 auth-crxn.conf 91847e65c48e585f298bb766b2b20c43f5380686b594233da3b722962b03f2f4c858bf299b745027dadd184408a87b1e85ebf03b027196756455afea69f79cf9 auth-crxn.conf
b82efa5e5c796a5cadf08ac5bf54a79211318662680eb48e4d680655deecd88c5aabc4bd674fd24a402900adeaad3703af2aee5af221a0baec8e422b4e1017d3 redxen.eu b82efa5e5c796a5cadf08ac5bf54a79211318662680eb48e4d680655deecd88c5aabc4bd674fd24a402900adeaad3703af2aee5af221a0baec8e422b4e1017d3 redxen.eu
68263b82e6fd302ebdea492922b1514ceae73f45108a2b42875b5e9b2f8b07097e708f8f0f73a9686500cc1ca44aff2ed0a907c06320f934b1cca47cf9090e4e crxn" 5811c16899b9d3463836ef9f58ae97cb62b32d305ae9e2e9933e76f9463ff33bf47c21e491559fbe4bbd5842c4c164c8bb53f692c9e145206c38f4f576f55cdf crxn"

38
config/unbound/zones/crxn
View File

@ -4,13 +4,43 @@
@ IN SOA 9804624.nbg1-dc3.hetzner.redxen admin.redxen.eu. 2021021701 ( 1800 120 604800 3600 ) @ IN SOA 9804624.nbg1-dc3.hetzner.redxen admin.redxen.eu. 2021021701 ( 1800 120 604800 3600 )
;
; RedXen <caskd@redxen.eu> ; RedXen <caskd@redxen.eu>
;
@ IN NS 9804624.nbg1-dc3.hetzner.redxen @ IN NS 9804624.nbg1-dc3.hetzner.redxen
dns 10800 IN CNAME 9804624.nbg1-dc3.hetzner.redxen dns 10800 IN CNAME 9804624.nbg1-dc3.hetzner.redxen
taro.nurnberg.hetzner.redxen 86400 IN CNAME 9804624.nbg1-dc3.hetzner.redxen
9804624.nbg1-dc3.hetzner.redxen 86400 IN AAAA fd8a:6111:3b1a:dddd::1
; Friendly names
lain.nurnberg.hetzner.redxen 86400 IN CNAME 8101153.nbg1-dc3.hetzner.redxen
arisu.falkenstein.hetzner.redxen 86400 IN CNAME 8201371.fsn1-dc14.hetzner.redxen
chisa.falkenstein.hetzner.redxen 86400 IN CNAME 9013723.fsn1-dc14.hetzner.redxen
masami.nurnberg.hetzner.redxen 86400 IN CNAME 9227948.nbg1-dc3.hetzner.redxen
taro.nurnberg.hetzner.redxen 86400 IN CNAME 9804624.nbg1-dc3.hetzner.redxen
; Uniquie identifiers
9804624.nbg1-dc3.hetzner.redxen 86400 IN AAAA fd8a:6111:3b1a:dddd::1
9227948.nbg1-dc3.hetzner.redxen 86400 IN AAAA fd8a:6111:3b1a:dddd::2
9013723.fsn1-dc14.hetzner.redxen 86400 IN AAAA fd8a:6111:3b1a:dddd::3
8201371.fsn1-dc14.hetzner.redxen 86400 IN AAAA fd8a:6111:3b1a:dddd::4
8101153.nbg1-dc3.hetzner.redxen 86400 IN AAAA fd8a:6111:3b1a:dddd::5
; Frontend
redxen 10800 IN AAAA fd8a:6111:3b1a:dddd::4
redxen 10800 IN AAAA fd8a:6111:3b1a:dddd::5
; Services
git.redxen 10800 IN CNAME redxen
stats.redxen 10800 IN CNAME redxen
sd.redxen 10800 IN CNAME redxen
packages.redxen 10800 IN CNAME redxen
seed.redxen 10800 IN CNAME redxen
mumble.redxen 10800 IN CNAME 8201371.fsn1-dc14.hetzner.redxen
mail.redxen 10800 IN CNAME 9227948.nbg1-dc3.hetzner.redxen
xonotic.redxen 10800 IN CNAME 9804624.nbg1-dc3.hetzner.redxen
;
; deavmi <deavmi@redxen.eu> ; deavmi <deavmi@redxen.eu>
;
bester.deavmi IN A 10.0.0.2 bester.deavmi IN A 10.0.0.2
bester.deavmi IN AAAA fd8a:6111:3b1a:bbbb::2 bester.deavmi IN AAAA fd8a:6111:3b1a:bbbb::2
jaco.deavmi IN A 10.0.0.7 jaco.deavmi IN A 10.0.0.7
@ -23,10 +53,14 @@ personal.deavmi IN A 10.1.0.2
lockdown.bnet.deavmi IN A 10.1.0.3 lockdown.bnet.deavmi IN A 10.1.0.3
router3.deavmi IN A 10.6.3.1 router3.deavmi IN A 10.6.3.1
;
; Gustav ; Gustav
;
excalibur.gustav IN A 10.6.4.1 excalibur.gustav IN A 10.6.4.1
arthur.gustav IN A 10.6.4.3 arthur.gustav IN A 10.6.4.3
;
; zhoreeq <zhoreeq@protonmail.com> ; zhoreeq <zhoreeq@protonmail.com>
;
ceo-of-mesh.zhoreeq IN A 10.18.1.7 ceo-of-mesh.zhoreeq IN A 10.18.1.7
lofi.zhoreeq IN A 10.18.1.1 lofi.zhoreeq IN A 10.18.1.1