add dnsmasq pi server

This commit is contained in:
2024-01-31 12:40:28 -05:00
parent fd0699170f
commit 0266d9499c
10 changed files with 77 additions and 8 deletions

View File

@@ -1,5 +1,7 @@
load_module /usr/lib64/nginx/modules/ngx_stream_module.so;
worker_processes 8;
events {}
stream {
@@ -12,19 +14,19 @@ stream {
# Map all SSL parsed server names to hosts
map $ssl_preread_server_name $name {
"" 127.0.0.1;
"" 127.0.0.1:443;
# For each domain we need to stream to a remote server, forward to internal domain
{% for domain in stream_ssl %}
{{ domain.external_domain }} {{ domain.internal_domain }};
{{ domain.external_domain }} {{ domain.internal_domain }}:{{ domain.internal_port }};
{% endfor %}
# For each domain we want to terminate, forward to internal http server
{% for domain in terminate_ssl %}
{{ domain.external_domain }} 127.0.0.1;
{{ domain.external_domain }} 127.0.0.1:443;
{% endfor %}
default {{ nginx.defaults.domain }};
default {{ nginx.defaults.domain }}:443;
}
# Forward 80 traffic
@@ -32,8 +34,9 @@ stream {
access_log /var/log/nginx/stream-access-80.log basic;
listen {{ ansible_default_ipv4.address }}:80;
resolver 1.1.1.1;
proxy_pass $name:80;
proxy_pass $name;
ssl_preread on;
proxy_socket_keepalive on;
}
# Forward 443 traffic
@@ -41,8 +44,9 @@ stream {
access_log /var/log/nginx/stream-access-443.log basic;
listen {{ ansible_default_ipv4.address }}:443;
resolver 1.1.1.1;
proxy_pass $name:443;
proxy_pass $name;
ssl_preread on;
proxy_socket_keepalive on;
}
}