Add proxy service for arch repository

coreos-config/playbook.yaml

@@ -104,6 +104,7 @@
     - { role: compose_project, service: traefik }
     - { role: compose_project, service: keycloak }
     - { role: compose_project, service: minio }
+    - { role: compose_project, service: repo_proxy }
     - { role: compose_project, service: registry }
     - { role: compose_project, service: pantalaimon }
     - { role: compose_project, service: gitea }
@@ -117,6 +118,7 @@
     - { role: compose_project, service: search }
     - { role: compose_project, service: syncthing }
     - { role: compose_project, service: blog }
+    - { role: compose_project, service: wkd }
     - { role: compose_project, service: linktree }
     - { role: compose_project, service: caddy }
     - { role: compose_project, service: diun }

coreos-config/roles/compose_project/templates/repo_proxy/.env

@@ -0,0 +1 @@
+COMPOSE_PROJECT_NAME=repo_proxy

coreos-config/roles/compose_project/templates/repo_proxy/Caddyfile

@@ -0,0 +1,11 @@
+{
+        auto_https off
+}
+http://repo.tobiasmanske.de {
+        uri /os/* replace /os/ /repo/
+        reverse_proxy /repo/* https://s3.tobiasmanske.de {
+                header_up Host s3.tobiasmanske.de
+        }
+        root * /var/www
+        file_server
+}

coreos-config/roles/compose_project/templates/repo_proxy/docker-compose.yaml

@@ -0,0 +1,22 @@
+---
+version: "3.4"
+
+services:
+  redirect:
+    image: caddy:2
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro,z
+      - ./www:/var/www:ro,Z
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.repoproxy.rule=Host(`repo.tobiasmanske.de`)"
+      - "traefik.http.routers.repoproxy.entryPoints=websecure"
+      - "traefik.http.services.repoproxy.loadbalancer.server.port=80"
+    restart: always
+    networks:
+      - gateway
+
+networks:
+  gateway:
+    external: true
+...

coreos-config/roles/compose_project/templates/repo_proxy/www/index.html

@@ -0,0 +1 @@
+Hello World