Separate interfaces and DNS updates.

This commit is contained in:
Otho 2023-01-20 22:57:55 -05:00
parent 35d8849e1e
commit fb224b361e
Signed by: Otho
GPG Key ID: 16C720CD3BBE21D9
2 changed files with 104 additions and 64 deletions

View File

@ -1,7 +1,9 @@
ServerName othostash.com
ServerRoot /usr/local
ServerRoot "/usr/local"
Listen 443
Listen [2603:3015:1003:566d::dad:db]:80
Listen [2603:3015:1003:566d::dad:db]:443
Listen 10.1.9.10:443
LoadModule mpm_prefork_module libexec/apache24/mod_mpm_prefork.so
LoadModule authn_file_module libexec/apache24/mod_authn_file.so
@ -49,9 +51,20 @@ Group www
Require all denied
</Directory>
MDomain othostash.com
MDCertificateAgreement accepted
MDContactEmail admin@othostash.com
MDomain othostash.com www.othostash.com
#<VirtualHost 10.1.9.10:443>
# <VirtualHost [2603:3015:1003:566d::dad:feed]:443>
# ServerName "plex.othostash.com"
# SSLEngine on
# ProxyPass "/" "http://localhost:32400"
# ProxyPassReverse "/" "http://localhost:32400"
# </VirtualHost>
<VirtualHost 10.1.9.10:443 [2603:3015:1003:566d::dad:db]:443>
ServerName "www.othostash.com"
ServerName "othostash.com"
<Location "/md-status">
SetHandler md-status
@ -80,8 +93,8 @@ DocumentRoot "/data"
</IfModule>
SSLEngine on
SSLCertificateFile /usr/local/etc/apache24/fullchain.pem
SSLCertificateKeyFile /usr/local/etc/apache24/privkey.pem
# SSLCertificateFile /usr/local/etc/apache24/fullchain.pem
# SSLCertificateKeyFile /usr/local/etc/apache24/privkey.pem
ErrorLog "/var/log/httpd-error.log"
LogLevel warn
@ -118,6 +131,8 @@ LogLevel warn
AddType application/x-gzip .gz .tgz
</IfModule>
</VirtualHost>
<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin

37
dns.tf
View File

@ -18,22 +18,47 @@ terraform {
provider "namecheap" {}
variable "stashbox-vip" {
variable "network" {
type = string
default = "stashbox.delhi.o4data.net."
default = "2603:3015:1003:566d"
}
variable "ipv4" {
type = string
default = "96.78.236.124"
}
resource "namecheap_domain_records" "othostash" {
domain = "othostash.com"
record {
hostname = "@"
address = var.stashbox-vip
type = "ALIAS"
ttl = 300
address = "${var.network}::dad:db"
type = "AAAA"
}
record {
hostname = "feed"
address = "${var.network}::dad:feed"
type = "AAAA"
}
record {
hostname = "www"
address = "othostash.com."
address = "othostash.com"
type = "CNAME"
}
record {
hostname = "plex"
address = "feed.othostash.com"
type = "CNAME"
}
record {
hostname = "@"
address = var.ipv4
type = "A"
}
record {
hostname = "feed"
address = var.ipv4
type = "A"
}
}