ansible/files/domechild.cyberia.club/nginx/nullhex.com.conf

@@ -0,0 +1,35 @@
+server {
+    listen 80;
+    server_name nullhex.com;
+    include /etc/nginx/snippets/letsencrypt.conf;
+
+    location / {
+        return 302 https://$server_name$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name nullhex.com;
+    include /etc/nginx/snippets/ssl.conf;
+
+    ssl_certificate /etc/ssl/uacme/nullhex.com/cert.pem;
+    ssl_certificate_key /etc/ssl/uacme/private/nullhex.com/key.pem;
+
+    client_max_body_size 10M;
+
+    gzip on;
+    gzip_types text/css;
+
+    location / {
+        root /var/www/nullhex.com;
+    }
+    location /send {
+        proxy_pass http://localhost:9184/send;
+    }
+}
+
+
+
+

ansible/files/keys/alena.pub

@@ -0,0 +1 @@
+ssh-rsa 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 alena@alena

ansible/files/keys/forest-old.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKD3XzZTbTteIgnaFY+fiiOl9EnNN+twyNchnWjCkYqv forest@tower

ansible/files/keys/forest.pub

@@ -1 +1 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKD3XzZTbTteIgnaFY+fiiOl9EnNN+twyNchnWjCkYqv forest@tower
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA/5WJOwVibff/fG/2pz2NoDCCuxDtUh0jgydyVWWd/Q forest@debian

ansible/files/keys/mara.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINVKUtUo/03o/oE71hf6hg2I1o8tvX59EU90jU4EzE7c mara@mara

ansible/files/keys/skh.pub

@@ -1 +1 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH8vPQlmKbxHpQ6ndA6JqBdKpVhRCuPM31e3i6fhrxnp thelemur@thelemur
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBuXd//koNURteWh2ATHkpfZMo5m4mifYBL18oC+NdnV thelemur@thelemur

ansible/files/mothership.cyberia.club/nginx/grafana.cyberia.club.conf

@@ -18,6 +18,7 @@ server {
 
     location / {
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Host $host;
         proxy_pass http://localhost:3000;
     }
 }

ansible/group_vars/all

@@ -2,13 +2,15 @@
 
 operators:
   - j3s
+  - forest-old
   - forest
   - vvesley
-  - zico
   - queerposting
   - reese
   - nibz
   - symys
+  - mara
+  - alena
 
 alpine_common_utilities:
   - ip6tables

ansible/group_vars/headscaleservers

@@ -0,0 +1,4 @@
+---
+
+service_operators:
+  - skh

ansible/hosts

@@ -13,6 +13,9 @@ legion.cyberia.club
 [goatcounterservers]
 elliot.cyberia.club
 
+[headscaleservers]
+elliot.cyberia.club
+
 [gancioservers]
 calendar.layerze.ro
 

ansible/site.yml

@@ -58,6 +58,14 @@
     - prometheus
     - grafana
     - blackbox_exporter
+    - role: nginx
+      tags: nginx
+    - role: uacme
+      tags: nginx
+    - role: nginx-custom-configs
+      tags: 
+        - nginx-custom-configs
+        - nginx
 
 - name: setup CI (Continuous Integration) Servers
   hosts: ciservers