infrastructure/ansible/roles/ingress/handlers/main.yml

- name: restart wireguard
  service:
    name: wg-quick@wg0
    state: restarted
  become: true

- name: restart nginx
  service:
    name: nginx
    state: restarted
  become: true

- name: reload nftables
  command:
    argv:
      - nft
      - -f
      - /etc/nftables.conf
  become: true
Install and provision wireguard client on ingress server 2020-12-21 18:24:35 +00:00			`- name: restart wireguard`
			`service:`
Fix service name on ingress It's not alpine 2021-08-24 11:52:35 +01:00			`name: wg-quick@wg0`
Install and provision wireguard client on ingress server 2020-12-21 18:24:35 +00:00			`state: restarted`
			`become: true`
Actually version the ingress haproxy config 2021-06-12 17:04:21 +01:00
Replace ingress proxy with nginx This enables HTTPS redirecting at it too much more easily, and matches the gateway configuration. Requires using upstream versions of nginx to enable https://nginx.org/en/docs/stream/ngx_stream_realip_module.html 2021-08-24 14:21:51 +01:00			`- name: restart nginx`
Actually version the ingress haproxy config 2021-06-12 17:04:21 +01:00			`service:`
Replace ingress proxy with nginx This enables HTTPS redirecting at it too much more easily, and matches the gateway configuration. Requires using upstream versions of nginx to enable https://nginx.org/en/docs/stream/ngx_stream_realip_module.html 2021-08-24 14:21:51 +01:00			`name: nginx`
Actually version the ingress haproxy config 2021-06-12 17:04:21 +01:00			`state: restarted`
			`become: true`
Use nftables for firewall on ingress See ya never, iptables! 2023-10-26 21:34:06 +01:00
			`- name: reload nftables`
			`command:`
			`argv:`
			`- nft`
			`- -f`
			`- /etc/nftables.conf`
			`become: true`