Merge pull request #1417 from mira-miracoli/mq-proxy

Add Traefik configuration for new private IP RabbitMQ

files/traefik/rules/mq-router.yml

@@ -0,0 +1,9 @@
+tcp:
+  routers:
+    mq-rtr:
+      rule: "HostSNI(`*`)" # || ClientIP(`132.230.224.103`)" Allow by host IP
+      service: "mq"
+      entryPoints:
+        - amqps
+      tls:
+        passthrough: true

files/traefik/rules/mq-service.yml

@@ -0,0 +1,6 @@
+tcp:
+  services:
+    mq:
+      loadBalancer:
+        servers:
+          - address: "10.5.68.232:5671" #replace once mq02 is in playbook

group_vars/traefik.yml

@@ -71,6 +71,7 @@ traefik_containers:
       - --global.checkNewVersion=false
       - --entryPoints.web.address=:80
       - --entryPoints.websecure.address=:443
+      - --entryPoints.amqps.address=:5671
       - --entryPoints.web.http.redirections.entryPoint.to=websecure
       - --entryPoints.web.http.redirections.entryPoint.scheme=https
       - --entryPoints.metrics.address=:8082
@@ -148,6 +149,10 @@ traefik_containers:
         published_port: 443
         protocol: tcp
         mode: host
+      - target_port: 5671
+        published_port: 5671
+        protocol: tcp
+        mode: host
       - target_port: 8082
         published_port: 8082
         protocol: tcp

traefik-proxy.yml

@@ -17,6 +17,19 @@
         - policycoreutils-python-utils
         - python3-pip
 
+    - name: Configure Firewall
+      ansible.posix.firewalld:
+        service: "{{ item }}"
+        permanent: true
+        zone: public
+        state: enabled
+      with_items:
+        - ssh
+        - amqps
+        - http
+        - https
+        - ntp
+
     - name: Install python docker
       become: true
       ansible.builtin.pip: