update mesh

2024-06-24 17:04:36 -04:00
parent b7f93fe41d
commit 4e51d263fb
11 changed files with 54 additions and 7 deletions
--- a/nginx/https.conf
+++ b/nginx/https.conf
@@ -8,6 +8,11 @@ server {
    }
 {% endif %}

+{% if item.external.password_protect is defined and item.external.password_protect is sameas true %}
+    auth_basic           "Administrator’s Area";
+    auth_basic_user_file /etc/nginx/.htpasswd;
+{% endif %}
+
    http2 on;

    gzip on;
--- a/nginx/service/certbot-renew.service
+++ b/nginx/service/certbot-renew.service
@@ -3,4 +3,4 @@ Description=Certbot Renewal

 [Service]
 Type=oneshot
-ExecStart=/usr/bin/certbot renew
+ExecStart=/usr/bin/certbot renew --dns-route53 -n
--- a/nginx/vars.yaml
+++ b/nginx/vars.yaml
@@ -9,7 +9,9 @@ defaults:
    internal_https_port: 443
 internal_ipv4_regex:
  - "10.1.*"
-  - "10.10.*"
+  - "192.168.4.*"
+  - "192.168.5.*"
+  - "192.168.6.*"
 internal_ipv6_regex:
  - "2600:1700:1e6c:a81f.*"
 expose_tld: .reeseapps.com