Sergei Poljanski
4865efd078
All checks were successful
deploy / ansible (push) Successful in 6m25s
The XMPP certificate covers xmpp.asxp.io and conference.asxp.io, which point at asxpio-services, so Let's Encrypt validates them there. A small nginx on port 80 passes /.well-known/acme-challenge/ over the VPC to Traefik, which holds all certificates, and answers 404 to the rest. Assisted-by: Claude:opus-5-5
11 lines
293 B
Django/Jinja
11 lines
293 B
Django/Jinja
# Managed by Ansible (role acme_forward).
|
|
services:
|
|
acme-forward:
|
|
image: nginx:{{ acme_forward_nginx_version }}
|
|
container_name: acme-forward
|
|
ports:
|
|
- "80:80"
|
|
volumes:
|
|
- ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
|
|
restart: unless-stopped
|
|
mem_limit: 32m
|