From 9b5371fa080f92a49b355f4b53a008d9c408be41 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Tue, 12 Aug 2025 17:34:50 -0700
Subject: [PATCH] proxies: add forge site/reverseproxy

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 playbooks/include/proxies-reverseproxy.yml | 15 +++++++++++++++
 playbooks/include/proxies-websites.yml     |  6 ++++++
 2 files changed, 21 insertions(+)

diff --git a/playbooks/include/proxies-reverseproxy.yml b/playbooks/include/proxies-reverseproxy.yml
index 26e7993758..6cf3c9d5c2 100644
--- a/playbooks/include/proxies-reverseproxy.yml
+++ b/playbooks/include/proxies-reverseproxy.yml
@@ -1018,3 +1018,18 @@
     #ocp4_rdu3: true
     tags:
     - webhook2fedmsg
+
+  - role: httpd/reverseproxy
+    website: "forge{{ env_suffix }}.fedoraproject.org"
+    destname: forge
+    balancer_name: apps-ocp
+    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_rdu3_stg, ocp_nodes) }}"
+    targettype: openshift
+    keephost: true
+    ocp4: "{{ (env == 'production') | bool }}"
+    ocp4_rdu3: "{{ (env == 'staging') | bool }}"
+    # When prod has moved to rdu3:
+    #ocp4: false
+    #ocp4_rdu3: true
+    tags:
+    - forge
diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml
index 1a59a7e8b0..513d6225cd 100644
--- a/playbooks/include/proxies-websites.yml
+++ b/playbooks/include/proxies-websites.yml
@@ -1287,3 +1287,9 @@
     tags:
     - riscv-koji
 
+  - role: httpd/website
+    site_name: "forge{{ env_suffix }}.fedoraproject.org"
+    sslonly: true
+    cert_name: "{{wildcard_cert_name}}"
+    tags:
+    - forge