From e9ca246090a1712f26653ebf620a042a2f1f925b Mon Sep 17 00:00:00 2001
From: Alexander Dahl <alex@netz39.de>
Date: Fri, 8 Jul 2022 07:16:55 +0200
Subject: [PATCH] :web: pottwal: Prepare reverse proxy for prosody XMPP/Jabber
 server

The container can serve HTTP for yet unknown reasons, but that port is
not yet exposed.  Do NOT confuse this with the old static website
jabber.n39.eu which was decoupled from prosody and plain HTML only.

The reverse proxy is used to make the static website available, and to
let dehydrated renew the certs.  The certs are used for https to the
static website _and_ for the XMPP server itself!
---
 pottwal.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pottwal.yml b/pottwal.yml
index e8758a1..ba721da 100644
--- a/pottwal.yml
+++ b/pottwal.yml
@@ -158,6 +158,14 @@
         volumes:
           - "{{ prosody_data }}/var/www:/public:ro"
 
+    - name: Setup proxy site jabber.n39.eu
+      # point to static website for now
+      include_role:
+        name: setup-http-site-proxy
+      vars:
+        site_name: "jabber.n39.eu"
+        proxy_port: "{{ jabber_host_port }}"
+
     - name: Check if hedgedoc data dir exists
       ansible.builtin.stat:
         path: "{{ data_dir }}/hedgedoc"