Use service-specific oauth2-proxy instances
This commit is contained in:
@@ -1,25 +1,25 @@
|
||||
---
|
||||
- name: Socat socket for {{ service_name }}
|
||||
- name: Socat socket for {{ socat_service_name }}
|
||||
ansible.builtin.template:
|
||||
src: socat.socket.j2
|
||||
dest: /etc/systemd/system/{{ service_name }}-socat.socket
|
||||
dest: /etc/systemd/system/{{ socat_service_name }}-socat.socket
|
||||
mode: "0644"
|
||||
notify: Restart socat socket for {{ service_name }}
|
||||
notify: Restart socat socket for {{ socat_service_name }}
|
||||
|
||||
- name: Socat container for {{ service_name }}
|
||||
- name: Socat container for {{ socat_service_name }}
|
||||
ansible.builtin.import_role:
|
||||
name: container
|
||||
vars:
|
||||
container_name: "{{ service_name }}-socat"
|
||||
container_name: "{{ socat_service_name }}-socat"
|
||||
container_image: "docker.io/alpine/socat:latest"
|
||||
container_command:
|
||||
- "ACCEPT-FD:3,fork"
|
||||
- "TCP:{{ service_name }}:{{ service_container_http_port }}"
|
||||
- "TCP:{{ socat_service_name }}:{{ socat_target_http_port }}"
|
||||
container_user: nobody
|
||||
container_networks:
|
||||
- "{{ service_name }}"
|
||||
- "{{ socat_service_name }}"
|
||||
container_requires:
|
||||
- "{{ service_name }}-socat.socket"
|
||||
- "{{ service_name }}.service"
|
||||
- "{{ socat_service_name }}-socat.socket"
|
||||
- "{{ socat_service_name }}.service"
|
||||
container_auto_start: false
|
||||
container_auto_update: "{{ service_auto_update }}"
|
||||
|
||||
Reference in New Issue
Block a user