From 2c231e25dfe35791726fc1666f94e60c4311523d Mon Sep 17 00:00:00 2001
From: mrwho <mrwho@mrwho.ru>
Date: Sun, 10 May 2026 19:52:57 +0300
Subject: [PATCH] fix

---
 playbooks/mrwho/dns-local.yml    | 21 ++++++++++++++-------
 playbooks/mrwho/router-nginx.yml | 17 +++++++++++++++++
 2 files changed, 31 insertions(+), 7 deletions(-)

diff --git a/playbooks/mrwho/dns-local.yml b/playbooks/mrwho/dns-local.yml
index ce0d543..207abef 100644
--- a/playbooks/mrwho/dns-local.yml
+++ b/playbooks/mrwho/dns-local.yml
@@ -49,19 +49,24 @@
       - name: 'local.mrwho.ru'
         type: primary
         primaries:
-          - 212.60.5.162
+          - 172.20.21.100
         certbot_key: "CerbotKey"
-        also_notify:
-          - 212.60.5.162
-          - 80.211.195.127
+#        also_notify:
+#          - 212.60.5.162
+#          - 80.211.195.127
         name_servers:
-          - ns1.mrwho.ru.
-          - ns2.mrwho.ru.
+          - router.local.mrwho.ru.
         hosts:
+          - name: ns
+            ip: 172.20.21.100
           - name: local.mrwho.ru.
             ip: 172.20.21.100
           - name: router
             ip: 172.20.21.100
+            aliases:
+              - git
+          - name: portainer
+            ip: 172.20.21.100
           - name: ca
             ip: 172.20.21.99
           - name: opensearch
@@ -72,5 +77,7 @@
             ip: 172.20.21.103
           - name: gitlab
             ip: 172.20.21.104
-          - name: git
+          - name: pod01
             ip: 172.20.21.105
+          - name: OpenShift01
+            ip: 172.20.21.106
diff --git a/playbooks/mrwho/router-nginx.yml b/playbooks/mrwho/router-nginx.yml
index 2d6b463..852a7cf 100644
--- a/playbooks/mrwho/router-nginx.yml
+++ b/playbooks/mrwho/router-nginx.yml
@@ -57,6 +57,23 @@
           - location: /
             target: "http://172.20.21.105:3000"
 
+      - virthost_name: portainer.local.mrwho.ru
+        listen: "80"
+        server_name: portainer.local.mrwho.ru
+  #      index: index.php
+        # error_page: /path_to_error_page.html
+        ssl_enabled: true
+        ssl_only: true
+  #      ssl_letsencrypt_certs: "{{ nginx_letsencrypt_managed }}"
+  #      root: "{{ nginx_webroot }}"
+        server_tokens: "off"
+        proxy_standard_setup: true
+        proxy_additional_options:
+          - proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache:30m max_size=250m;
+        locations:
+          - location: /
+            target: "https://172.20.21.105:9443"
+
 ###### Firewalld configuration ######
     firewall:
 #      - previous: replaced          # flush previous rules