chore: initial import from KNEL/PFVCluster@041d311 [#769]

Split per O&M lane work order. Full history: KNEL/PFVCluster.
shellcheck debt fixed in librenms-agent (quoting, arithmetic, backticks);
fixes upstream ntp-server.sh bug: input_wakeups reported PACKETSENDFAILURES
instead of INPUTWAKEUPS. mysql.sh (PHP-in-.sh) exempt per house rule.

https://projects.knownelement.com/issues/769#note-4152
This commit is contained in:
2026-09-03 21:38:32 -05:00
commit 1fae951f5d
51 changed files with 8206 additions and 0 deletions
+60
View File
@@ -0,0 +1,60 @@
# tsys-librenms nginx vhost for the OAM docker UIs — deployed 2026-09-03 [#697]
# cert: oam-ui.knel.net (SANs: smokeping/netdisco/oxidized/unpoller.knel.net) from fleet CA
# IaC codification tracked via #454 (AWX lane); this file is the config SoR copy.
server {
listen 443 ssl;
server_name smokeping.knel.net;
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
location / {
proxy_pass http://127.0.0.1:8081;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_http_version 1.1;
}
}
server {
listen 443 ssl;
server_name netdisco.knel.net;
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
location / {
proxy_pass http://127.0.0.1:8082;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_http_version 1.1;
}
}
server {
listen 443 ssl;
server_name oxidized.knel.net;
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
location / {
proxy_pass http://127.0.0.1:8083;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_http_version 1.1;
}
}
server {
listen 443 ssl;
server_name unpoller.knel.net;
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
location / {
proxy_pass http://127.0.0.1:8084;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_http_version 1.1;
}
}