reverse_proxy_mklist

This role generates a proper list for our reverse proxy role based on all host and group vars.

Requirements

A running webserver at all target hosts, see reverse proxy for future information.

Role Variables

At host or group vars, where this script is applied (the host that runs the reverse proxy)

Option	Type	Default	Description	Required
ignore_hosts	list of strings	[]	list of ansible hosts to ignore	N
reverse_proxy_mklist_host_suffix	string		Suffix to append to all hostnames	if hosts are accessed via hostname

At host vars, who serve some sites (target server)

Option	Type	Default	Description	Required
served_domains	list of dicts		See reverse_proxy for possible values	Y
reverse_proxy_mklist_override_target	string		When defined, defines the hostname or IP that is used as an upstream for this host	N
reverse_proxy_mklist_via_ip	boolean	false	Whether this host should be contacted via IP instead of the hostname	N

Inside the served_domains of a host

Option	Type	Default	Description	Required
reverse_proxy_skip	boolean	false	Skip this served domain from generation	N

Example Playbook

Vars:

reverse_proxy_server01.yml:

description: Reverse Proxy
letsencrypt_email: fuu@example.com
default_url: https://stuvus.uni-stuttgart.de
domain_prefixes:
  - www
domain_suffixes:
  - example.com

web01.yml:

description: Webserver 1 for public usage ( testing )
served_domains:
  - domains:
    - test
    - test.test
interfaces:
  - mac: AA:AA:AA:11:11:11
    ip: 192.168.0.2

web02.yml:

description: Webserver 2 for internal and public usage
served_domains:
  - domains:
    - intern
    auth: true
  - domains:
    - public
    auth: true
interfaces:
  - mac: AA:AA:AA:11:11:22
    ip: 192.168.0.3

Result

The configuration files above, will be result in the following configuration for reverse_proxy_sever01:

description: Reverse Proxy
letsencrypt_email: fuu@example.com
default_url: https://stuvus.uni-stuttgart.de
domain_prefixes:
  - www
domain_suffixes:
  - example.com
proxy_domains:
  - target_description: Webserver 1 for public usage ( testing )
    target_host: web01
    target_ip: 192.168.0.2
    served_domains:
      - domains:
        - test
        - test.test
  - target_description: Webserver 2 for internal and public usage
served_domains:
  - domains:
    - intern
    auth: true
  - domains:
    - public
    auth: true

License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.

Author Information

• Markus Mroch (Mr-Pi) markus.mroch@stuvus.uni-stuttgart.de