SUNET/net-ops
9
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

move bankid-idp.sunet.se to new LBs

Browse source
This commit is contained in:
Maria Haider 2025-04-22 08:51:46 +02:00
parent 0342f1adb3
commit 5dc599fd90
Signed by: mariah
GPG key ID: 6EF520A1829E8B1D
1 changed files with 28 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
lb-common/overlay/etc/hiera/data/group.yaml
View file

@ -820,3 +820,31 @@ sunet_frontend:
letsencrypt_server: 'acme-c.sunet.se'
haproxy_imagetag: '20230228-stable'
frontendtools_imagetag: '20230228'
'bankidp':
haproxy_volumes:
- "/etc/ssl/certs/infra.crt:/etc/ssl/certs/infra.crt:ro"
- "/opt/frontend/config/ssl/infra_haproxy.crt:/opt/frontend/config/ssl/infra_haproxy.crt:ro"
site_name: 'bankid-idp.sunet.se'
frontends:
'tug-lb-1.sunet.se':
ips: ['37.156.192.86', '2001:6b0:60:c0::86']
'sthb-lb-1.sunet.se':
ips: ['37.156.192.87', '2001:6b0:60:c0::87']
backends:
default:
'bankid-idp-app1.sunet.se':
ips: ['192.36.171.75']
server_args: 'ssl alpn h2 crt /opt/frontend/config/ssl/infra_haproxy.crt verify required ca-file /etc/ssl/certs/infra.crt check check-alpn http/1.1'
'bankid-idp-app2.sunet.se':
ips: ['89.45.237.145']
server_args: 'ssl alpn h2 crt /opt/frontend/config/ssl/infra_haproxy.crt verify required ca-file /etc/ssl/certs/infra.crt check check-alpn http/1.1'
'bankid-idp-app3.sunet.se':
ips: ['89.46.20.114']
server_args: 'ssl alpn h2 crt /opt/frontend/config/ssl/infra_haproxy.crt verify required ca-file /etc/ssl/certs/infra.crt check check-alpn http/1.1'
allow_ports:
- 443
- 80
letsencrypt_server: 'acme-c.sunet.se'
haproxy_imagetag: '20230228-stable'
frontendtools_imagetag: '20230228'