iac/ansible/inventory/group_vars/all
Sergei Poljanski 4865efd078
All checks were successful
deploy / ansible (push) Successful in 6m25s
acme_forward: send services' ACME challenges to Traefik on ops
The XMPP certificate covers xmpp.asxp.io and conference.asxp.io, which
point at asxpio-services, so Let's Encrypt validates them there. A small
nginx on port 80 passes /.well-known/acme-challenge/ over the VPC to
Traefik, which holds all certificates, and answers 404 to the rest.

Assisted-by: Claude:opus-5-5
2026-11-13 08:07:36 +04:00
..
monitoring.yaml monitoring: keep logs for two years 2026-11-13 07:09:18 +04:00
network.yaml ansible rework 2025-11-04 11:06:35 +02:00
paths.yaml ansible cleanup 2025-11-04 14:23:16 +02:00
s3.yaml monitoring: keep Loki chunks in S3, 90 days of logs and metrics 2026-11-13 07:04:00 +04:00
vault.yaml ansible: monitoring with Prometheus, Loki and Grafana 2026-11-13 04:59:11 +04:00
vault.yaml.template ansible rework 2025-11-04 11:06:35 +02:00
wireguard.yaml add wg: sanya 2026-04-05 19:17:18 +03:00
xmpp_cert.yaml acme_forward: send services' ACME challenges to Traefik on ops 2026-11-13 08:07:36 +04:00