WIP: generiek nginx role

group_vars/all.yaml

@@ -6,22 +6,25 @@ notify_email: bestuur@bitlair.nl
 acme_bootstrap_certs: no
 trusted_ranges:
     # localhost
-  - { v: ipv4, cidr: 127.0.0.1/8 }
+  - { v: ipv4, cidr: "127.0.0.1/8" }
   - { v: ipv6, cidr: "::1" }
     # rf1928
-  - { v: ipv4, cidr: 10.0.0.0/8 }
-  - { v: ipv4, cidr: 172.16.0.0/12 }
-  - { v: ipv4, cidr: 192.168.0.0/16 }
+  - { v: ipv4, cidr: "10.0.0.0/8" }
+  - { v: ipv4, cidr: "172.16.0.0/12" }
+  - { v: ipv4, cidr: "192.168.0.0/16" }
     # v6 local
   - { v: ipv6, cidr: "fe80::/10" }
     # vihamij
-  - { v: ipv4, cidr: 45.88.49.140 }
+  - { v: ipv4, cidr: "45.88.49.140" }
     # eventinfra
-  - { v: ipv4, cidr: 204.2.64.0/20 }
-
-  - { v: ipv4, cidr: 100.64.0.0/10 }
-  - { v: ipv4, cidr: 185.205.52.194/32 }
+  - { v: ipv4, cidr: "204.2.64.0/20" }
+    # bitlair
+  - { v: ipv4, cidr: "100.64.0.0/10" }
+  - { v: ipv4, cidr: "185.205.52.194/32" }
   - { v: ipv6, cidr: "2a02:166b:92::/48" }
+    # foobar
+  - { v: ipv4, cidr: "31.187.251.213/32" }
+  - { v: ipv6, cidr: "2a0e:5700:4:2::/64" }
 
 root_access:
   - ak

group_vars/monitoring.yaml

@@ -40,3 +40,9 @@ prometheus_scrape_configs:
         target_label: instance
       - target_label: __address__
         replacement: "{{ blackbox_exporter_web_listen_address }}"
+
+nginx_sites:
+  - server_name: "dashboard.bitlair.nl"
+    localproxy: "9000"
+    snippets:
+      - "prometheus-nginx.j2"