upstream ingress_service { {% for node in groups['k8s-cluster'] %} server {{ hostvars[node]['ansible_default_ipv4']['address'] }}:30080; {% endfor %} } server { listen 80; server_name {{ ansible_host }}; location / { proxy_pass http://ingress_service; } } # TODO: setup https and ssl bypass