Lukáš Kucharczyk
a0b1b75a73
Improve networks
...
Create a single external network called "external".
Create container-specific networks.
Only a few containers need access to these.
So far: openldap, postgres.
2021-06-21 10:38:18 +02:00
Lukáš Kucharczyk
87853b9fde
Fix nginx template snippets not being copied
2021-05-15 00:01:23 +02:00
Lukáš Kucharczyk
af5e7c153f
Move certificates to Ansible Vault ( #27 )
2021-05-14 21:58:11 +00:00
Lukáš Kucharczyk
cd7b9918a1
Change how certificates are installed
2021-05-14 21:58:11 +00:00
Lukáš Kucharczyk
c158a21dfc
nginx: separate self-signed certs
2021-05-05 20:41:28 +02:00
Lukáš Kucharczyk
d0d33b47b9
nginx: join the default bridge network for ext access
2021-05-05 19:35:55 +02:00
Lukáš Kucharczyk
54de631d29
Improve routing between containers
...
Create user network nginx-internal
and use Docker's internal DNS server
to resolve containers by hostname.
2021-04-27 23:09:21 +02:00
Lukáš Kucharczyk
d9bd3ac145
Improve certificate generation
...
1. Generate root CA
2. Generate wildcard CSR
3. Sign wildcard CSR with root CA
4. Install root CA system-wide
2021-04-27 22:29:52 +02:00
Lukáš Kucharczyk
4cc2998fac
Generate certificates automatically
2021-04-27 19:13:35 +02:00
Lukáš Kucharczyk
765e9e5a47
Enable SSL
2021-04-26 23:54:10 +02:00
Lukáš Kucharczyk
4907cdfd99
Explicitly restart containers to prevent hard-to-debug issues
2021-04-26 22:36:53 +02:00
Lukáš Kucharczyk
58fd1aa430
Make sure directories exist
2021-04-26 22:35:59 +02:00
Lukáš Kucharczyk
f4310c2e7d
Initial commit with working nginx and jellyfin
2021-04-23 01:04:44 +02:00
Lukáš Kucharczyk