itik/bgwaf
Private
Public Access
2
0
Fork 0
Code Issues Pull Requests Releases 9 Activity

consul: activate https

Browse Source
This commit is contained in:
Sébastien NAMECHE
2026-02-12 14:37:42 +01:00
parent f80735417b
commit 5eeb74d53e
5 changed files with 21 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
seb4itik/byow/roles/caddy/templates/Caddyfile
View File

@@ -17,7 +17,7 @@
prefix "caddy-{{ caddy_my_name }}-tls"
value_prefix "{{ caddy_my_name }}"
aes_key "{{ caddy_consul_aes_key }}"
tls_enabled "false"
tls_enabled "true"
tls_insecure "false"
}
{% endif %}
@@ -214,7 +214,7 @@
prefix "caddy-{{ caddy_my_name }}-rl"
value_prefix "{{ caddy_my_name }}"
aes_key "{{ caddy_consul_aes_key }}"
tls_enabled "false"
tls_enabled "true"
tls_insecure "false"
}
{% endif %}

9
seb4itik/byow/roles/caddy/templates/caddy.service
View File

@@ -1,7 +1,7 @@
[Unit]
Description=WAF ({{ caddy_my_name }}) (built with BYOW: Build Your Own WAF)
After=network.target network-online.target
Requires=network-online.target
Requires=network-online.target{% if caddy_consul %} consul.service{% endif %}
[Service]
Type=notify
@@ -17,10 +17,9 @@ AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
StandardOutput=journal
StandardError=journal
SyslogIdentifier={{ caddy_my_name }}
{#
# FIXME: SSL connexion doesn't work
# Environment="CONSUL_CLIENT_CERT={{ caddy_consul_client_cert }}" "CONSUL_CLIENT_KEY={{ caddy_consul_client_key }}"
#}
{% if caddy_consul %}
Environment="CONSUL_CLIENT_CERT={{ caddy_consul_client_cert }}" "CONSUL_CLIENT_KEY={{ caddy_consul_client_key }}"
{% endif %}
[Install]
WantedBy=multi-user.target