raucao
44f86d3f07
Move kredits-github onto Node 22.23.4 and behind the openresty reverse proxy on the proxy hosts, replacing its own nginx + the custom haproxy entry. - pin Node 22.23.4; run the app with HOST=0.0.0.0 / NODE_ENV=production and open port 3000 to 10.1.1.0/24 so the proxy can reach it over ZeroTier - create /opt/kredits-github owned by the deploy user before cloning - add kredits-github::nginx_proxy (tls_cert_for + openresty_site, upstream from role:kredits_github) and register it in the openresty_proxy run list - drop the app-node nginx recipe/template and its role entry
53 lines
1.1 KiB
Ruby
53 lines
1.1 KiB
Ruby
name "openresty_proxy"
|
|
|
|
override_attributes(
|
|
'openresty' => {
|
|
'server_names_hash_bucket_size' => 128
|
|
},
|
|
)
|
|
|
|
development_run_list = %w(
|
|
role[openresty]
|
|
kosmos_assets::nginx_site
|
|
)
|
|
|
|
default_run_list = %w(
|
|
role[openresty]
|
|
)
|
|
|
|
production_run_list = %w(
|
|
role[openresty]
|
|
role[garage_gateway]
|
|
kosmos_assets::nginx_site
|
|
kosmos_blossom::nginx
|
|
kosmos_discourse::nginx
|
|
kosmos_drone::nginx
|
|
kosmos_garage::nginx_web
|
|
kosmos_garage::nginx_s3
|
|
kosmos_gitea::nginx
|
|
kosmos_gitea::nginx_ssh
|
|
kosmos_liquor-cabinet::nginx
|
|
kosmos_rsk::nginx_testnet
|
|
kosmos_rsk::nginx_mainnet
|
|
kosmos_strfry::nginx
|
|
kosmos_website::default
|
|
kosmos_website::redirects
|
|
kosmos-akkounts::nginx
|
|
kosmos-akkounts::nginx_api
|
|
kosmos-bitcoin::nginx_lndhub
|
|
kosmos-hubot::nginx_botka_irc-libera-chat
|
|
kosmos-hubot::nginx_hal8000_xmpp
|
|
kosmos-ipfs::nginx_public_gateway
|
|
kredits-github::nginx_proxy
|
|
kosmos-mastodon::nginx
|
|
remotestorage_discourse::nginx
|
|
sockethub::nginx
|
|
role[tor_proxy]
|
|
)
|
|
|
|
env_run_lists(
|
|
'_default' => default_run_list,
|
|
'development' => development_run_list,
|
|
'production' => production_run_list
|
|
)
|