summaryrefslogtreecommitdiff
path: root/frontends
diff options
context:
space:
mode:
authorPaul Buetow <paul@buetow.org>2026-04-08 10:31:45 +0300
committerPaul Buetow <paul@buetow.org>2026-04-08 10:31:45 +0300
commit25b75130bdf65c5d54f6334614738f24a6fb743b (patch)
treed4eed7f02d3e68cb6ed3a6092a4042b22c619948 /frontends
parent34da902add1ec58883daa4e3204cca65d03523e1 (diff)
relayd: route garage.f3s.buetow.org to Garage S3 backends (task d)
Add table <garage> (192.168.2.130-132), Host header match in f3s block, and forward to port 3900 with tcp health checks on https4/https6. Made-with: Cursor
Diffstat (limited to 'frontends')
-rw-r--r--frontends/etc/relayd.conf.tpl14
1 files changed, 14 insertions, 0 deletions
diff --git a/frontends/etc/relayd.conf.tpl b/frontends/etc/relayd.conf.tpl
index 3f5edfc..79d3e57 100644
--- a/frontends/etc/relayd.conf.tpl
+++ b/frontends/etc/relayd.conf.tpl
@@ -22,6 +22,13 @@ table <f3s_jellyfin> {
192.168.2.122
}
+# Garage S3 API on f0/f1/f2 FreeBSD hosts (WireGuard)
+table <garage> {
+ 192.168.2.130
+ 192.168.2.131
+ 192.168.2.132
+}
+
# Local OpenBSD httpd
table <localhost> {
127.0.0.1
@@ -73,6 +80,9 @@ http protocol "https" {
<% } elsif ($host eq 'jellyfin.f3s.buetow.org') {
-%>
match request header "Host" value "<%= $prefix.$host -%>" forward to <f3s_jellyfin>
+ <% } elsif ($host eq 'garage.f3s.buetow.org') {
+ -%>
+ match request header "Host" value "<%= $prefix.$host -%>" forward to <garage>
<% }
}
} -%>
@@ -94,6 +104,8 @@ relay "https4" {
forward to <f3s_registry> port 30001 check tcp
# Jellyfin uses NodePorts (bypasses Traefik)
forward to <f3s_jellyfin> port 30096 check tcp
+ # Garage S3 API on FreeBSD hosts
+ forward to <garage> port 3900 check tcp
}
relay "https6" {
@@ -107,6 +119,8 @@ relay "https6" {
forward to <f3s_registry> port 30001 check tcp
# Jellyfin uses NodePorts (bypasses Traefik)
forward to <f3s_jellyfin> port 30096 check tcp
+ # Garage S3 API on FreeBSD hosts
+ forward to <garage> port 3900 check tcp
}
# Jellyfin alternative ports for Android app discovery