No description
The snippet will now set the correct Host for the next hop and keep the original site in the X-Forward-Auth-Host. The authentik caddy-site will then put the X-Forward-Auth-Host into the X-Forwarded-Host (which would normally be the authentik host/domain). Authentik is able to handle the X-Forwarded-Host header. |
||
|---|---|---|
| dns | ||
| inventory | ||
| modules | ||
| playbooks | ||
| scripts | ||
| templates | ||
| .env.example | ||
| .envrc | ||
| .gitignore | ||
| .pre-commit-config.yaml | ||
| .terraform.lock.hcl | ||
| ansible.cfg | ||
| creds.json | ||
| dnsconfig.js | ||
| hosts.auto.tfvars | ||
| LICENSE | ||
| main.tf | ||
| Makefile | ||
| output.tf | ||
| README.md | ||
| requirements.yml | ||
| services.auto.tfvars | ||
| shell.nix | ||
| variables.tf | ||
DNS records for serguzim.net
Get started
- install DNSControl (direnv and shell.nix should help)
- create credentials for ovh: Control panel - OVHcloud
- alternative: follow instructions on dnscontrol: OVH | DNSControl
- enter credentials to ovh in .env file (copy from .env.example)
- check credentials with
make dns-check - run
make dns
Ansible project to deploy services
Variables
CLI variable overwrites
force_forgejo_runner_registration
-e force_forgejo_runner_registration=True
Force forgejo-runner to prompt a new registration token.
docker_update
-e docker_update=True
Pull and build the docker compose services