icinga: use monitoring.wikitide.net (#3764)

Internal services can match hostnames on wikitide.net, which is the
purpose of that domain to not have internal stuff on miraheze.org much.

modules/icingaweb2/files/icinga2.conf

@@ -2,7 +2,7 @@ server {
  listen 80;
  listen [::]:80;
 
- server_name icinga.miraheze.org;
+ server_name monitoring.wikitide.net;
  root /usr/share/icingaweb2/public;
 
  location /php_status {
@@ -14,24 +14,24 @@ server {
  }
 
  location / {
- return 301 https://icinga.miraheze.org/;
+ return 301 https://monitoring.wikitide.net/;
  }
 }
 
 server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
 
- server_name icinga.miraheze.org;
+ server_name monitoring.wikitide.net;
  root /usr/share/icingaweb2/public;
 
- ssl_certificate /etc/ssl/localcerts/wildcard.miraheze.org-2020-2.crt;
- ssl_certificate_key /etc/ssl/private/wildcard.miraheze.org-2020-2.key;
+ ssl_certificate /etc/ssl/localcerts/wikitide.net.crt;
+ ssl_certificate_key /etc/ssl/private/wikitide.net.key;
 
  add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload";
 
  location / {
- rewrite ^(.*)$ https://icinga.miraheze.org/$1;
+ rewrite ^(.*)$ https://monitoring.wikitide.net/$1;
  }
 
  location ~ ^/index\.php(.*)$ {

modules/icingaweb2/manifests/init.pp

@@ -260,12 +260,12 @@
  $address = $facts['networking']['ip6']
  }
 
- monitoring::services { 'icinga.miraheze.org HTTPS':
+ monitoring::services { 'monitoring.wikitide.net HTTPS':
  check_command => 'check_http',
  vars => {
  address6 => $address,
  http_ssl => true,
- http_vhost => 'icinga.miraheze.org',
+ http_vhost => 'monitoring.wikitide.net',
  },
  }
 }

modules/varnish/templates/default.vcl

@@ -409,7 +409,7 @@ sub vcl_recv {
  }
 
  # Do not cache requests from this domain
- if (req.http.Host == "icinga.miraheze.org" || req.http.Host == "grafana.wikitide.net") {
+ if (req.http.Host == "monitoring.wikitide.net" || req.http.Host == "grafana.wikitide.net") {
  set req.backend_hint = mon181;
 
  if (req.http.upgrade ~ "(?i)websocket") {