mrwho/Ansible-Roles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update longhorn kubernetes

Browse source
This commit is contained in:
mrwho 2026-07-14 22:26:20 +03:00
parent de4c5b68a7
commit 32f4228033
3 changed files with 43 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
filter_plugins/__pycache__/ipaddr.cpython-39.pyc
View file

Binary file not shown.

16
playbooks/mrwho/dns-local.yml
View file

@ -83,9 +83,13 @@
ip: 172.20.21.105 ip: 172.20.21.105
- name: sad - name: sad
ip: 172.20.21.109 ip: 172.20.21.109
- name: rke-master01 - name: k8s-manager
ip: 172.20.21.210 ip: 172.20.21.200
- name: rancher - name: k8s-master01
ip: 172.20.21.210 ip: 172.20.21.201
- name: rke-node01 - name: k8s-worker01
ip: 172.20.21.211 ip: 172.20.21.202
- name: kubernetes
ip: 172.20.21.100
- name: longhorn
ip: 172.20.21.100

35
playbooks/mrwho/router-nginx.yml
View file

@ -30,13 +30,13 @@
# - nginx-cors.conf # - nginx-cors.conf
nginx_streams: nginx_streams:
- stream: NTP - stream: NTP
type: normal
listen_port: 123 listen_port: 123
protocol: udp protocol: udp
responses: 1 responses: 1
timeout: 3 timeout: 3
backends: backends:
- 10.203.2.11:123 - 172.20.21.100:123
- 10.203.2.12:123
nginx_virthosts: nginx_virthosts:
- virthost_name: git.local.mrwho.ru - virthost_name: git.local.mrwho.ru
@ -47,6 +47,8 @@
# error_page: /path_to_error_page.html # error_page: /path_to_error_page.html
ssl_enabled: true ssl_enabled: true
ssl_only: true ssl_only: true
nginx_ssl_cert_file: '/etc/letsencrypt/live/mrwho.ru/fullchain.pem'
nginx_ssl_cert_key: '/etc/letsencrypt/live/mrwho.ru/privkey.pem'
# ssl_letsencrypt_certs: "{{ nginx_letsencrypt_managed }}" # ssl_letsencrypt_certs: "{{ nginx_letsencrypt_managed }}"
# root: "{{ nginx_webroot }}" # root: "{{ nginx_webroot }}"
server_tokens: "off" server_tokens: "off"
@ -64,6 +66,8 @@
# error_page: /path_to_error_page.html # error_page: /path_to_error_page.html
ssl_enabled: true ssl_enabled: true
ssl_only: true ssl_only: true
nginx_ssl_cert_file: '/etc/letsencrypt/live/mrwho.ru/fullchain.pem'
nginx_ssl_cert_key: '/etc/letsencrypt/live/mrwho.ru/privkey.pem'
# ssl_letsencrypt_certs: "{{ nginx_letsencrypt_managed }}" # ssl_letsencrypt_certs: "{{ nginx_letsencrypt_managed }}"
# root: "{{ nginx_webroot }}" # root: "{{ nginx_webroot }}"
server_tokens: "off" server_tokens: "off"
@ -74,6 +78,33 @@
- location: / - location: /
target: "https://172.20.21.105:9443" target: "https://172.20.21.105:9443"
- virthost_name: kubernetes.local.mrwho.ru
server_name: kubernetes.local.mrwho.ru
ssl_enabled: true
ssl_only: true
nginx_ssl_cert_file: '/etc/letsencrypt/live/mrwho.ru/fullchain.pem'
nginx_ssl_cert_key: '/etc/letsencrypt/live/mrwho.ru/privkey.pem'
server_tokens: "off"
proxy_standard_setup: true
proxy_additional_options:
- proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache:30m max_size=250m;
locations:
- location: /
target: "https://172.20.21.201:10001"
- virthost_name: longhorn.local.mrwho.ru
server_name: longhorn.local.mrwho.ru
ssl_enabled: true
ssl_only: true
nginx_ssl_cert_file: '/etc/letsencrypt/live/mrwho.ru/fullchain.pem'
nginx_ssl_cert_key: '/etc/letsencrypt/live/mrwho.ru/privkey.pem'
server_tokens: "off"
proxy_standard_setup: true
proxy_additional_options:
- proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache:30m max_size=250m;
locations:
- location: /
target: "https://172.20.21.201:10002"
###### Firewalld configuration ###### ###### Firewalld configuration ######
firewall: firewall:
# - previous: replaced # flush previous rules # - previous: replaced # flush previous rules