From c4712dc97ada81fb0f0569afde9d28806d26a132 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thorben=20G=C3=BCnther?= <admin@xenrox.net>
Date: Tue, 14 Feb 2023 01:17:55 +0100
Subject: [PATCH] alertmanager: Proxy with nginx

Needed for ntfy-alertmanager.
---
 .../alertmanager/files/alertmanager.nginx.conf  | 17 +++++++++++++++++
 roles/alertmanager/tasks/main.yml               |  9 +++++++++
 terraform_hetzner/locals.tf                     |  2 +-
 3 files changed, 27 insertions(+), 1 deletion(-)
 create mode 100644 roles/alertmanager/files/alertmanager.nginx.conf

diff --git a/roles/alertmanager/files/alertmanager.nginx.conf b/roles/alertmanager/files/alertmanager.nginx.conf
new file mode 100644
index 0000000..de3a8f0
--- /dev/null
+++ b/roles/alertmanager/files/alertmanager.nginx.conf
@@ -0,0 +1,17 @@
+server {
+    include /etc/nginx/snippets/http.conf;
+    server_name alertmanager.xenrox.net;
+}
+
+server {
+    include /etc/nginx/snippets/https.conf;
+    server_name alertmanager.xenrox.net;
+
+    location / {
+        proxy_pass http://127.0.0.1:9093;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
diff --git a/roles/alertmanager/tasks/main.yml b/roles/alertmanager/tasks/main.yml
index 0bf6856..d01098c 100644
--- a/roles/alertmanager/tasks/main.yml
+++ b/roles/alertmanager/tasks/main.yml
@@ -64,3 +64,12 @@
     name: ntfy-alertmanager
     enabled: true
     state: started
+
+- name: Install nginx config
+  ansible.builtin.copy:
+    src: alertmanager.nginx.conf
+    dest: /etc/nginx/nginx.d/alertmanager.conf
+    owner: root
+    group: root
+    mode: 0644
+  notify: Restart nginx
diff --git a/terraform_hetzner/locals.tf b/terraform_hetzner/locals.tf
index 7245e8b..1279460 100644
--- a/terraform_hetzner/locals.tf
+++ b/terraform_hetzner/locals.tf
@@ -22,7 +22,7 @@ locals {
 
     "bot", "faceit", "gamja", "pass", "search",
 
-    "push", "music", "screego", "status", "ntfy",
+    "push", "music", "screego", "status", "ntfy", "alertmanager"
   ])
 
   xenrox_net_cname = {
-- 
2.44.0