Otho/Stashbox
1
0
Fork 0
mirror of https://asciireactor.com/otho/stashbox synced 2024-11-21 21:35:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

Separate interfaces and DNS updates.

Browse Source
This commit is contained in:
Otho 2023-01-20 22:57:55 -05:00
parent 35d8849e1e
commit fb224b361e
Signed by: Otho
GPG Key ID: 16C720CD3BBE21D9
2 changed files with 104 additions and 64 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

77
apache24/httpd.conf
View File

@ -1,7 +1,9 @@
ServerName othostash.com
ServerRoot /usr/local
ServerRoot "/usr/local"
Listen 443
Listen [2603:3015:1003:566d::dad:db]:80
Listen [2603:3015:1003:566d::dad:db]:443
Listen 10.1.9.10:443
LoadModule mpm_prefork_module libexec/apache24/mod_mpm_prefork.so
LoadModule authn_file_module libexec/apache24/mod_authn_file.so
@ -49,44 +51,55 @@ Group www
Require all denied
</Directory>
MDomain othostash.com
MDCertificateAgreement accepted
MDContactEmail admin@othostash.com
MDomain othostash.com www.othostash.com
#<VirtualHost 10.1.9.10:443>
# <VirtualHost [2603:3015:1003:566d::dad:feed]:443>
# ServerName "plex.othostash.com"
# SSLEngine on
# ProxyPass "/" "http://localhost:32400"
# ProxyPassReverse "/" "http://localhost:32400"
# </VirtualHost>
<Location "/md-status">
<VirtualHost 10.1.9.10:443 [2603:3015:1003:566d::dad:db]:443>
ServerName "www.othostash.com"
ServerName "othostash.com"
<Location "/md-status">
SetHandler md-status
</Location>
</Location>
DocumentRoot "/data"
<Directory "/data">
DocumentRoot "/data"
<Directory "/data">
Options Indexes
AllowOverride Options Indexes FileInfo AuthConfig
AuthType Basic
AuthName "Who be you?"
AuthUserFile /usr/local/etc/apache24/.badpass
Require valid-user
</Directory>
</Directory>
<DirectoryMatch "^.*/\..*">
<DirectoryMatch "^.*/\..*">
Require all denied
</DirectoryMatch>
</DirectoryMatch>
<Files ".*">
<Files ".*">
Require all denied
</Files>
</Files>
<IfModule dir_module>
<IfModule dir_module>
DirectoryIndex index.html
</IfModule>
</IfModule>
SSLEngine on
SSLCertificateFile /usr/local/etc/apache24/fullchain.pem
SSLCertificateKeyFile /usr/local/etc/apache24/privkey.pem
SSLEngine on
# SSLCertificateFile /usr/local/etc/apache24/fullchain.pem
# SSLCertificateKeyFile /usr/local/etc/apache24/privkey.pem
ErrorLog "/var/log/httpd-error.log"
LogLevel warn
ErrorLog "/var/log/httpd-error.log"
LogLevel warn
<IfModule log_config_module>
<IfModule log_config_module>
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
@ -96,27 +109,29 @@ LogLevel warn
</IfModule>
CustomLog "/var/log/httpd-access.log" common
</IfModule>
</IfModule>
<IfModule alias_module>
<IfModule alias_module>
ScriptAlias /cgi-bin/ "/data/metadata/www/cgi-bin/"
</IfModule>
</IfModule>
<Directory "/data/metadata/www/cgi-bin">
<Directory "/data/metadata/www/cgi-bin">
AllowOverride None
Options None
Require all granted
</Directory>
</Directory>
<IfModule headers_module>
<IfModule headers_module>
RequestHeader unset Proxy early
</IfModule>
</IfModule>
<IfModule mime_module>
<IfModule mime_module>
TypesConfig etc/apache24/mime.types
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
</IfModule>
</IfModule>
</VirtualHost>
<IfModule ssl_module>
SSLRandomSeed startup builtin

37
dns.tf
View File

@ -18,22 +18,47 @@ terraform {
provider "namecheap" {}
variable "stashbox-vip" {
variable "network" {
type = string
default = "stashbox.delhi.o4data.net."
default = "2603:3015:1003:566d"
}
variable "ipv4" {
type = string
default = "96.78.236.124"
}
resource "namecheap_domain_records" "othostash" {
domain = "othostash.com"
record {
hostname = "@"
address = var.stashbox-vip
type = "ALIAS"
ttl = 300
address = "${var.network}::dad:db"
type = "AAAA"
}
record {
hostname = "feed"
address = "${var.network}::dad:feed"
type = "AAAA"
}
record {
hostname = "www"
address = "othostash.com."
address = "othostash.com"
type = "CNAME"
}
record {
hostname = "plex"
address = "feed.othostash.com"
type = "CNAME"
}
record {
hostname = "@"
address = var.ipv4
type = "A"
}
record {
hostname = "feed"
address = var.ipv4
type = "A"
}
}