Tickets vm

group_vars/tickets.yaml

@@ -0,0 +1,28 @@
+---
+
+root_access:
+  - ak
+  - foobar
+  - polyfloyd
+
+acme_domains:
+ - tickets.bitlair.nl
+
+nginx_sites:
+  - server_name: "tickets.bitlair.nl"
+    config:
+      - |-
+        location / {
+          proxy_pass http://127.0.0.1:3000/;
+          proxy_http_version 1.1;
+          proxy_set_header Connection "upgrade";
+          proxy_set_header Upgrade $http_upgrade;
+          proxy_set_header X-Forwarded-For $remote_addr;
+          proxy_set_header X-Forwarded-Proto $scheme;
+
+          # by default nginx times out connections in one minute
+          proxy_read_timeout 1d;
+        }
+
+group_nft_input:
+  - "tcp dport { http, https } accept # Allow web-traffic from world"