auot02 with frakin' nginx doesnt work

base/hostconfig/auto02.sls

@@ -1,6 +1,6 @@
 systemd:
   service:
-   homeassistant:
+    container-homeassistant:
       Unit:
         Description: Homeassistant
         After: network-online.target local-fs.target
@@ -10,7 +10,7 @@ systemd:
         ExecStop: /usr/bin/podman stop homeassistant
       Install:
         WantedBy: multi-user.target
-   homeassistant-configurator:
+    container-homeassistant-configurator:
       Unit:
         Description: Homeassistant Configurator
         After: network-online.target local-fs.target
@@ -20,7 +20,7 @@ systemd:
         ExecStop: /usr/bin/podman stop homeassistant-configurator
       Install:
         WantedBy: multi-user.target
-   pihole:
+    container-pihole:
       Unit:
         Description: pihole
         After: network-online.target local-fs.target
@@ -30,7 +30,7 @@ systemd:
         ExecStop: /usr/bin/podman stop pihole
       Install:
         WantedBy: multi-user.target
-   docker-registry:
+    container-docker-registry:
       Unit:
         Description: Docker Registry
         After: network-online.target local-fs.target
@@ -40,73 +40,111 @@ systemd:
         ExecStop: /usr/bin/podman stop docker-registry
       Install:
         WantedBy: multi-user.target
-haproxy:
+    container-zwave2mqtt:
-  enabled: True
+      Unit:
-  overwrite: True
+        Description: zwave2mqtt - yes
-  global:
+        After: network-online.target local-fs.target
-    stats:
+        Requires: io.podman.service
-      enable: True
+      Service:
-      socketpath: /var/lib/haproxy/stats
+        ExecStart: /usr/bin/podman start -a zwave2mqtt
-      mode: 660
+        ExecStop: /usr/bin/podman stop zwave2mqtt
-      level: admin
+      Install:
-      # Optional extra bind parameter, for example to set the owner/group on the socket file
+        WantedBy: multi-user.target
-      extra: user haproxy group haproxy
+nginx:
-    ssl-default-bind-ciphers: "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384"
+  install_from_repo: False
-    ssl-default-bind-options: "no-sslv3 no-tlsv10 no-tlsv11"
+  server:
-
+    config:
-    user: haproxy
+      events:
-    group: haproxy
+        worker_connections: 100
-    chroot:
+  servers:
-      enable: True
+    managed:
-      path: /var/lib/haproxy
+      default:
-    daemon: True
+        enabled: false
-  defaults:
+      status:
-    stats:
+        enabled: true
-      - enable
+        config:
-      - uri: '/admin?stats'
+        - server:
-      - realm: 'Haproxy\ Statistics'
+          - server_name: _
-      - auth: 'admin1:AdMiN123'
+          - listen:
-    errorfiles:
+            - 127.0.0.1:80
-      400: /etc/haproxy/errors/400.http
+          - location /stub_status:
-      403: /etc/haproxy/errors/403.http
+            - stub_status: ''
-      408: /etc/haproxy/errors/408.http
+      proxy_auto:
-      500: /etc/haproxy/errors/500.http
+        enabled: true
-      502: /etc/haproxy/errors/502.http
+        config:
-      503: /etc/haproxy/errors/503.http
+        - server:
-      504: /etc/haproxy/errors/504.http
+          - server_name: auto2 auto2.chaos
-  resolvers:
+          - listen:
-    local_dns:
+            - 80 default_server
-      options:
+          - location /:
-        - nameserver resolvconf 192.168.10.1:53
+            - proxy_pass: http://127.0.0.1:8123
-        - resolve_retries 3
+            - proxy_set_header: "Host $host"
-        - timeout retry 1s
+            - proxy_http_version: "1.1"
-        - hold valid 10s
+            - proxy_set_header: "X-Real-IP $remote_addr"
-  listens:
+            - proxy_set_header: "X-Forwarded-For $proxy_add_x_forwarded_for"
-    stats:
+            - proxy_set_header: "Ugrade $http_upgrade"
-      bind:
+            - proxy_set_header: "Connection \"Upgrade\""
-        - "0.0.0.0:8998"
+          - location /api/websocket:
-      mode: http
+            - proxy_pass: http://127.0.0.1:8123/api/websocket
-      stats:
+            - proxy_set_header: "Host $host"
-        enable: True
+            - proxy_http_version: "1.1"
-        uri: "/admin?stats"
+            - proxy_set_header: "X-Real-IP $remote_addr"
-        refresh: "20s"
+            - proxy_set_header: "X-Forwarded-For $proxy_add_x_forwarded_for"
-  frontends:
+            - proxy_set_header: "Ugrade $http_upgrade"
-    frontend1:
+            - proxy_set_header: "Connection \"Upgrade\""
-      name: auto 
+      proxy_auto-conf:
-      bind: "*:80"
+        enabled: true
-      default_backend: auto
+        config:
-      acls: 
+        - server:
-        - host_auto hdr_beg(host) -i auto.
+          - server_name: auto-conf auto-conf.chaos
-      use_backends: 
+          - listen:
-        - auto if host_auto
+            - '80'
-  backends:
+          - location /:
-    backend1:
+            - proxy_redirect: "off"
-      name: auto
+            - proxy_pass: http://127.0.0.1:3218
-      balance: roundrobin
+      proxy_pihole:
-      servers:
+        enabled: true
-        server1:
+        config:
-          name: auto02
+        - server:
-          host: 127.0.0.1
+          - server_name: pihole pihole.chaos
-          port: 8123
+          - listen:
-          check: check
+            - '80'
-        
+          - location /admin:
+            - proxy_redirect: "off"
+            - proxy_pass: http://127.0.0.1:8080/admin
+            - add_header: 'Access-Control-Allow-Origin: "*"'
+            - proxy_set_header: 'Access-Control-Allow-Origin: "*"'
+      proxy_docker-reg:
+        enabled: true
+        config:
+        - server:
+          - server_name: docker-registry docker-registry.chaos docker-registry.lan
+          - listen:
+            - '80'
+          - location /:
+            - proxy_redirect: "off"
+            - proxy_pass: http://127.0.0.1:5000
+            - client_max_body_size: '10G'
+            - proxy_set_header: 'Host $host'
+            - proxy_set_header: 'X-Forwarded-For  $remote_addr'  
+            - proxy_set_header: 'Proxy-Connection ""'
+            - proxy_set_header: 'Access-Control-Allow-Origin "*"'
+            - proxy_set_header: 'Access-Control-Allow-Methods "HEAD, GET, OPTIONS, DELETE"'
+            - proxy_set_header: 'Access-Control-Allow-Headers "Authorization, Accept"'
+            - proxy_set_header: 'Access-Control-Allow-Credentials true'
+            - proxy_set_header: 'Access-Control-Expose-Headers "Docker-Content-Digest"'
+            - add_header: 'Access-Control-Allow-Origin "*"'
+            - add_header: 'Access-Control-Allow-Methods "HEAD, GET, OPTIONS, DELETE"'
+            - add_header: 'Access-Control-Allow-Headers "Authorization, Accept"'
+            - add_header: 'Access-Control-Allow-Credentials true'
+            - add_header: 'Access-Control-Expose-Headers "Docker-Content-Digest"'
+      proxy_zwave2mqtt:
+        enabled: true
+        config:
+        - server:
+          - server_name: zwave2mqtt zwave2mqtt.chaos
+          - listen:
+            - '80'
+          - location /:
+            - proxy_redirect: "off"
+            - proxy_pass: http://127.0.0.1:8091