157 lines
3.3 KiB
YAML

sites_available:
- fqdn: ds9.internal.ezri.dev
enabled: yes
cert_domain: internal.ezri.dev
upstream: https://10.242.2.10:8006
restricted: yes
allowed_ips:
- 10.242.0.2
- 10.242.3.0/24
- fqdn: files.ezri.dev
enabled: yes
cert_domain: ezri.dev
upstream: http://10.242.2.2:9001
max_upload: 0
- fqdn: git.ezri.dev
enabled: yes
cert_domain: ezri.dev
upstream: http://10.242.2.2:30008
- fqdn: idm.ezri.dev
enabled: yes
cert_domain: ezri.dev
upstream: https://10.242.2.13:8443
- fqdn: jellyfin.ezri.dev
enabled: yes
cert_domain: ezri.dev
upstream: http://10.242.2.2:30013
restricted: yes
allowed_ips:
- 10.242.0.0/16
- 68.5.180.44/32
- fqdn: lidarr.internal.ezri.dev
enabled: yes
cert_domain: internal.ezri.dev
upstream: http://10.242.2.12:8686
restricted: yes
allowed_ips:
# Wired and wireless
- 10.242.0.0/23
# VPN
- 10.242.3.0/24
- fqdn: mail.ezri.dev
enabled: yes
cert_domain: ezri.dev
upstream: http://10.242.2.13:8000
restricted: yes
allowed_ips:
# Wired, wireless, VPN
- 10.242.0.0/23
- 10.242.3.0/24
- fqdn: navidrome.ezri.dev
enabled: yes
cert_domain: ezri.dev
upstream: http://10.242.2.2:30043
restricted: yes
- fqdn: prowlarr.internal.ezri.dev
enabled: yes
cert_domain: internal.ezri.dev
upstream: http://10.242.2.12:9696
restricted: yes
allowed_ips:
- 10.242.0.0/23
- 10.242.3.0/24
- fqdn: qbittorrent.internal.ezri.dev
enabled: yes
cert_domain: internal.ezri.dev
upstream: http://10.242.2.11:8080
restricted: yes
allowed_ips:
- 10.242.0.0/23
- 10.242.3.0/24
- fqdn: radarr.internal.ezri.dev
enabled: yes
cert_domain: internal.ezri.dev
upstream: http://10.242.2.12:7878
restricted: yes
allowed_ips:
- 10.242.0.0/23
- 10.242.3.0/24
- fqdn: sonarr.internal.ezri.dev
enabled: yes
cert_domain: internal.ezri.dev
upstream: http://10.242.2.12:8989
restricted: yes
allowed_ips:
- 10.242.0.0/23
- 10.242.3.0/24
- fqdn: spacedock.internal.ezri.dev
enabled: yes
cert_domain: internal.ezri.dev
upstream: http://10.242.2.2:80
restricted: yes
allowed_ips:
- 10.242.0.2
- 10.242.3.0/24
- fqdn: vtt.ezri.dev
enabled: yes
cert_domain: ezri.dev
upstream: http://10.242.2.13:3000
max_upload: 512M
- fqdn: vw.ezri.dev
enabled: yes
cert_domain: ezri.dev
upstream: http://10.242.2.2:30032
restricted: yes
allowed_ips:
- 10.242.0.0/23
- 10.242.3.0/24
- fqdn: sysadmin-exercise.internal.ezri.dev
enabled: yes
cert_domain: internal.ezri.dev
upstream: http://10.242.2.207:8888
restricted: yes
allowed_ips:
- 10.242.0.0/16
- 129.123.107.0/24
- 50.39.97.200/32
streams_available:
- fqdn: git.ezri.dev
enabled: yes
listen_port: 2231
ssl: no
upstream: 10.242.2.2:30009
upstream_ssl: no
- fqdn: idm.ezri.dev
enabled: yes
listen_port: 636
ssl: yes
cert_domain: ezri.dev
upstream: 10.242.2.13:3636
upstream_ssl: yes
restricted: yes
allowed_ips:
- 10.242.0.107
- 10.242.2.2
- 10.242.0.1
- 10.242.2.1
- 10.242.0.2
- 10.242.2.13
- 10.242.3.0/24