Initial Lab Setup

roles/reverse_proxy/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+- name: Restart Caddy
+  ansible.builtin.systemd:
+    name: caddy
+    state: restarted
+  become: yes

roles/reverse_proxy/tasks/main.yml

@@ -0,0 +1,30 @@
+---
+- name: Ensure old Cloudsmith repository artifact is removed
+  ansible.builtin.file:
+    path: /etc/apt/sources.list.d/caddy-stable.list
+    state: absent
+  become: yes
+
+- name: Install Caddy server package from official Debian repositories
+  ansible.builtin.apt:
+    name: caddy
+    state: present
+    update_cache: yes
+  become: yes
+
+- name: Deploy Caddyfile configuration from template
+  ansible.builtin.template:
+    src: Caddyfile.j2
+    dest: /etc/caddy/Caddyfile
+    owner: caddy
+    group: caddy
+    mode: '0644'
+  become: yes
+  notify: Restart Caddy
+
+- name: Ensure Caddy service is enabled and running
+  ansible.builtin.systemd:
+    name: caddy
+    state: started
+    enabled: yes
+  become: yes

roles/reverse_proxy/templates/Caddyfile.j2

@@ -0,0 +1,146 @@
+# --- Yunohost: bumb ---
+gh120.de, *.gh120.de {
+    reverse_proxy 192.168.112.46:443 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+# --- Yunohost: rohan ---
+wks20.de, *.wks20.de {
+    reverse_proxy 192.168.112.42:443 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+
+# ==============================================================================
+# SUBDOMAINS FÜR GH120.DE (YunoHost 'bumb' - 192.168.112.46)
+# ==============================================================================
+
+ha.gh120.de {
+    reverse_proxy https://192.168.112.46 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+        header_up Web-Socket-Allowed true
+    }
+}
+
+nc.gh120.de {
+    reverse_proxy https://192.168.112.46 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+img.gh120.de {
+    request_body {
+        max_size 10GB
+    }
+    reverse_proxy https://192.168.112.46 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+docs.gh120.de {
+    reverse_proxy https://192.168.112.46 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+paper.gh120.de {
+    reverse_proxy https://192.168.112.46 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+
+# ==============================================================================
+# SUBDOMAINS FÜR WKS20.DE (YunoHost 'rohan' - 192.168.112.42)
+# ==============================================================================
+
+links.wks20.de {
+    reverse_proxy https://192.168.112.42 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+mantis.wks20.de {
+    reverse_proxy https://192.168.112.42 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+nc.wks20.de {
+    reverse_proxy https://192.168.112.42 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+pics.wks20.de {
+    request_body {
+        max_size 10GB
+    }
+    reverse_proxy https://192.168.112.42 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+roundc.wks20.de {
+    reverse_proxy https://192.168.112.42 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+tea.wks20.de {
+    reverse_proxy https://192.168.112.42 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+warden.wks20.de {
+    reverse_proxy https://192.168.112.42 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+        header_up Web-Socket-Allowed true
+    }
+}
+
+wiki.wks20.de {
+    reverse_proxy https://192.168.112.42 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+}
+
+
+
+# --- Future Optional (Auskommentiert) ---
+# jellyfin.gh120.de {
+#     reverse_proxy 192.168.123.114:8096
+#