From 13944b119b4c2ffcdc0eab0e8efc769efa5bdec2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thorben=20G=C3=BCnther?= <admin@xenrox.net>
Date: Wed, 15 Feb 2023 22:41:04 +0100
Subject: [PATCH] alertmanager: Proxy ntfy-alertmanager with nginx

Exposing it is necessary for the "Silence" feature.
---
 roles/alertmanager/files/ntfy-alertmanager.conf | 17 +++++++++++++++++
 roles/alertmanager/tasks/main.yml               | 11 ++++++++++-
 terraform_hetzner/locals.tf                     |  2 +-
 3 files changed, 28 insertions(+), 2 deletions(-)
 create mode 100644 roles/alertmanager/files/ntfy-alertmanager.conf

diff --git a/roles/alertmanager/files/ntfy-alertmanager.conf b/roles/alertmanager/files/ntfy-alertmanager.conf
new file mode 100644
index 0000000..721e7cf
--- /dev/null
+++ b/roles/alertmanager/files/ntfy-alertmanager.conf
@@ -0,0 +1,17 @@
+server {
+    include /etc/nginx/snippets/http.conf;
+    server_name ntfy-alertmanager.xenrox.net;
+}
+
+server {
+    include /etc/nginx/snippets/https.conf;
+    server_name ntfy-alertmanager.xenrox.net;
+
+    location / {
+        proxy_pass http://127.0.0.1:8089;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
diff --git a/roles/alertmanager/tasks/main.yml b/roles/alertmanager/tasks/main.yml
index d01098c..aabb4d7 100644
--- a/roles/alertmanager/tasks/main.yml
+++ b/roles/alertmanager/tasks/main.yml
@@ -65,7 +65,7 @@
     enabled: true
     state: started
 
-- name: Install nginx config
+- name: Install alertmanager nginx config
   ansible.builtin.copy:
     src: alertmanager.nginx.conf
     dest: /etc/nginx/nginx.d/alertmanager.conf
@@ -73,3 +73,12 @@
     group: root
     mode: 0644
   notify: Restart nginx
+
+- name: Install ntfy-alertmanager nginx config
+  ansible.builtin.copy:
+    src: ntfy-alertmanager.conf
+    dest: /etc/nginx/nginx.d/ntfy-alertmanager.conf
+    owner: root
+    group: root
+    mode: 0644
+  notify: Restart nginx
diff --git a/terraform_hetzner/locals.tf b/terraform_hetzner/locals.tf
index 1279460..d4f2138 100644
--- a/terraform_hetzner/locals.tf
+++ b/terraform_hetzner/locals.tf
@@ -22,7 +22,7 @@ locals {
 
     "bot", "faceit", "gamja", "pass", "search",
 
-    "push", "music", "screego", "status", "ntfy", "alertmanager"
+    "push", "music", "screego", "status", "ntfy", "alertmanager", "ntfy-alertmanager"
   ])
 
   xenrox_net_cname = {
-- 
2.44.0