puppet-prod/site/profiles/manifests/gitea/haproxy.pp
Ben Vincent 46e72f5dbf feat: enable external access to gitea
- add git.unkin.net to certbot
- export haproxy resources for gitea
- add be_gitea to haproxy, import the certbot cert
- update the ROOT_URL for gitea instances
2025-07-06 13:44:58 +10:00

22 lines
438 B
Puppet

# enable external access via haproxy
class profiles::gitea::haproxy (
Boolean $enable = false,
){
# export haproxy balancemember
profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_443":
service => 'be_gitea',
ports => [443],
options => [
"cookie ${facts['networking']['hostname']}",
'ssl',
'verify none',
'check',
'inter 2s',
'rise 3',
'fall 2',
]
}
}