From 25b75130bdf65c5d54f6334614738f24a6fb743b Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Wed, 8 Apr 2026 10:31:45 +0300
Subject: relayd: route garage.f3s.buetow.org to Garage S3 backends (task d)

Add table <garage> (192.168.2.130-132), Host header match in f3s block,
and forward to port 3900 with tcp health checks on https4/https6.

Made-with: Cursor
---
 frontends/etc/relayd.conf.tpl | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

(limited to 'frontends')

diff --git a/frontends/etc/relayd.conf.tpl b/frontends/etc/relayd.conf.tpl
index 3f5edfc..79d3e57 100644
--- a/frontends/etc/relayd.conf.tpl
+++ b/frontends/etc/relayd.conf.tpl
@@ -22,6 +22,13 @@ table <f3s_jellyfin> {
   192.168.2.122
 }
 
+# Garage S3 API on f0/f1/f2 FreeBSD hosts (WireGuard)
+table <garage> {
+  192.168.2.130
+  192.168.2.131
+  192.168.2.132
+}
+
 # Local OpenBSD httpd
 table <localhost> {
   127.0.0.1
@@ -73,6 +80,9 @@ http protocol "https" {
     <%         } elsif ($host eq 'jellyfin.f3s.buetow.org') {
     -%>
     match request header "Host" value "<%= $prefix.$host -%>" forward to <f3s_jellyfin>
+    <%         } elsif ($host eq 'garage.f3s.buetow.org') {
+    -%>
+    match request header "Host" value "<%= $prefix.$host -%>" forward to <garage>
     <%         }
           }
     } -%>
@@ -94,6 +104,8 @@ relay "https4" {
     forward to <f3s_registry> port 30001 check tcp
     # Jellyfin uses NodePorts (bypasses Traefik)
     forward to <f3s_jellyfin> port 30096 check tcp
+    # Garage S3 API on FreeBSD hosts
+    forward to <garage> port 3900 check tcp
 }
 
 relay "https6" {
@@ -107,6 +119,8 @@ relay "https6" {
     forward to <f3s_registry> port 30001 check tcp
     # Jellyfin uses NodePorts (bypasses Traefik)
     forward to <f3s_jellyfin> port 30096 check tcp
+    # Garage S3 API on FreeBSD hosts
+    forward to <garage> port 3900 check tcp
 }
 
 # Jellyfin alternative ports for Android app discovery
-- 
cgit v1.2.3