add homekeeper stack

2026-07-06 19:25:38 +02:00
commit 58983e6855
90 changed files with 6816 additions and 0 deletions
@@ -0,0 +1,50 @@
+---
+- name: Install nginx and certbot
+  apt:
+    name:
+      - nginx
+      - certbot
+      - python3-certbot-nginx
+    state: present
+    update_cache: true
+
+- name: Remove default nginx site
+  file:
+    path: /etc/nginx/sites-enabled/default
+    state: absent
+  notify: Reload nginx
+
+- name: Deploy homekeeper nginx config
+  template:
+    src: homekeeper.conf.j2
+    dest: /etc/nginx/sites-available/homekeeper.conf
+    mode: "0644"
+  notify: Reload nginx
+
+- name: Enable homekeeper nginx site
+  file:
+    src: /etc/nginx/sites-available/homekeeper.conf
+    dest: /etc/nginx/sites-enabled/homekeeper.conf
+    state: link
+  notify: Reload nginx
+
+- name: Obtain Let's Encrypt certificates
+  command: >
+    certbot --nginx -d {{ domain }} -d {{ gitea_domain }}
+    --non-interactive --agree-tos -m {{ gitea_admin_email }}
+    --redirect
+  args:
+    creates: /etc/letsencrypt/live/{{ domain }}/fullchain.pem
+  notify: Reload nginx
+
+- name: Enable nginx
+  service:
+    name: nginx
+    enabled: true
+    state: started
+
+handlers:
+  - name: Reload nginx
+    service:
+      name: nginx
+      state: reloaded
@@ -0,0 +1,77 @@
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    ''      close;
+}
+
+# ── Main app: friessn.de ────────────────────────────────────────────────────
+server {
+    listen 80;
+    server_name {{ domain }};
+    # certbot --nginx adds SSL redirect + listen 443 block here
+
+    root /var/www/html;
+    index index.html;
+
+    location = / {
+        try_files /index.html =404;
+    }
+
+    location = /api { return 301 /api/; }
+    location /api/ {
+        rewrite ^/api/(.*) /$1 break;
+        proxy_pass         http://127.0.0.1:8000;
+        proxy_http_version 1.1;
+        proxy_set_header   Host              $host;
+        proxy_set_header   X-Real-IP         $remote_addr;
+        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header   X-Forwarded-Proto $scheme;
+    }
+
+    location = /beekeeper { return 301 /beekeeper/; }
+    location /beekeeper/ {
+        rewrite ^/beekeeper/(.*) /$1 break;
+        proxy_pass         http://127.0.0.1:3838;
+        proxy_http_version 1.1;
+        proxy_set_header   Upgrade           $http_upgrade;
+        proxy_set_header   Connection        $connection_upgrade;
+        proxy_set_header   Host              $host;
+        proxy_set_header   X-Real-IP         $remote_addr;
+        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header   X-Forwarded-Proto $scheme;
+        proxy_read_timeout 86400s;
+        proxy_send_timeout 86400s;
+    }
+
+    location = /listkeeper { return 301 /listkeeper/; }
+    location /listkeeper/ {
+        rewrite ^/listkeeper/(.*) /$1 break;
+        proxy_pass         http://127.0.0.1:3839;
+        proxy_http_version 1.1;
+        proxy_set_header   Upgrade           $http_upgrade;
+        proxy_set_header   Connection        $connection_upgrade;
+        proxy_set_header   Host              $host;
+        proxy_set_header   X-Real-IP         $remote_addr;
+        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header   X-Forwarded-Proto $scheme;
+        proxy_read_timeout 86400s;
+        proxy_send_timeout 86400s;
+    }
+}
+
+# ── Gitea: git.friessn.de ───────────────────────────────────────────────────
+server {
+    listen 80;
+    server_name {{ gitea_domain }};
+    # certbot --nginx adds SSL redirect + listen 443 block here
+
+    client_max_body_size 512m;
+
+    location / {
+        proxy_pass         http://127.0.0.1:{{ gitea_http_port }};
+        proxy_http_version 1.1;
+        proxy_set_header   Host              $host;
+        proxy_set_header   X-Real-IP         $remote_addr;
+        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header   X-Forwarded-Proto $scheme;
+    }
+}