Expose pages sites

ansible/roles/gitlab-pages/files/docker-compose.yml

@@ -18,6 +18,14 @@ services:
     tmpfs:
       - /var/log/gitlab
     restart: unless-stopped
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.gitlab-pages.rule=HostRegexp(`{subdomain:[a-z]+}.pages.theorangeone.net`)
+      - traefik.http.routers.gitlab-pages.tls.certresolver=le
+      - traefik.http.routers.gitlab-pages.tls.domains[0].main=pages.theorangeone.net
+      - traefik.http.routers.gitlab-pages.tls.domains[0].sans=*.pages.theorangeone.net
+      - traefik.http.services.gitlab-pages-gitlab-pages.loadbalancer.server.port=8080
+      - traefik.http.services.gitlab-pages-gitlab-pages.loadbalancer.server.scheme=http
 
   ssh-server:
     image: linuxserver/openssh-server:latest

ansible/roles/traefik/files/traefik.yml

@@ -38,6 +38,10 @@ certificatesResolvers:
       storage: /etc/traefik/acme.json
       dnsChallenge:
         provider: cloudflare
+        delayBeforeCheck: 0
+        resolvers:
+          - 1.1.1.1:53
+          - 1.0.0.1:53
 
 serversTransport:
   insecureSkipVerify: true

terraform/theorangeone.net.tf

@@ -172,3 +172,11 @@ resource "cloudflare_record" "theorangeonenet_gitlab_pages" {
   type    = "A"
   ttl     = 1
 }
+
+resource "cloudflare_record" "theorangeonenet_gitlab_pages_wildcard" {
+  zone_id = cloudflare_zone.theorangeonenet.id
+  name    = "*.pages"
+  value   = var.walker_ip
+  type    = "A"
+  ttl     = 1
+}