Homebox

.gitmodules

@@ -141,3 +141,6 @@
 [submodule "collections/ansible_collections/l3d/time"]
 	path = collections/ansible_collections/l3d/time
 	url = https://github.com/roles-ansible/ansible_collection_time.git
+[submodule "roles/l3d.homebox"]
+	path = roles/l3d.homebox
+	url = https://github.com/roles-ansible/ansible_role_homebox.git

host_vars/services.l3d.space/vars.yml

@@ -6,6 +6,8 @@ nginx_sites:
   - name: 'etebase.l3d.ch'
   - name: 'grafana.l3d.ch'
   - name: 'www.grafana.l3d.ch'
+  - name: 'i.l3d.ch'
+  - name: 'www.i.l3d.ch'
   - name: 'node-exporter.services.l3d.space'
   - name: 'nginx-exporter.services.l3d.space'
 
@@ -44,6 +46,10 @@ grafana_dashboards:
     revision_id: '1'
     datasource: '{{ grafana_datasources.0.name }}'
 
+# l3d.homebox
+homebox__env_options_allow_registration: false
+homebox__env_web_host: '127.0.0.1'
+
 # l3d.nginx_exporter
 nginx_exporter_listen_address: '127.0.0.1:9113'
 nginx_exporter_scrape_uri: 'https://node-exporter.services.l3d.space/nginx_status'

site.yml

@@ -50,6 +50,7 @@
     - {role: do1jlr.etebase, tags: [etebase, etesync, calendar, kalender, contacts, kontakte]}
     - {role: grafana.grafana.grafana, tags: [grafana. monitoring]}
     - {role: prometheus.prometheus.prometheus, tags: [monitoring, prometheus]}
+    - {role: l3d.homebox, tags: [homebox]}
 
 - name: Deploy mail config
   hosts: mail

templates/files/nginx/sites/i.l3d.ch_tls.conf

@@ -0,0 +1,20 @@
+server {
+        listen 443 ssl http2;
+        listen [::]:443 ssl http2;
+
+        server_name i.l3d.ch;
+
+        include snippets/tls_parameters_{{ site.name }}.snippet.conf;
+        include snippets/tls_certificate_{{ site.name }}.snippet.conf;
+        include snippets/logging_{{ site.name }}.snippet.conf;
+
+        location / {
+             proxy_pass http://localhost:7745;
+             client_max_body_size 10M;
+             proxy_read_timeout 1600;
+             proxy_set_header Host $host;
+             proxy_set_header X-Real-IP $remote_addr;
+             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+             proxy_set_header X-Forwarded-Proto $scheme;
+        }
+}

templates/files/nginx/sites/www.i.l3d.ch_tls.conf

@@ -0,0 +1,14 @@
+server {
+        listen 443 ssl http2;
+        listen [::]:443 ssl http2;
+
+        server_name www.i.l3d.ch;
+
+        include snippets/tls_parameters_{{ site.name }}.snippet.conf;
+        include snippets/tls_certificate_{{ site.name }}.snippet.conf;
+        include snippets/logging_{{ site.name }}.snippet.conf;
+
+        location / {
+                return 308 https://i.l3d.ch/;
+        }
+}