Initial server configuration

traefik/config/dashboard.yml

@@ -0,0 +1,9 @@
+# /services/traefik/config/dashboard.yml
+
+http:
+  routers:
+    traefik:
+      entryPoints:
+        - https
+      rule: Host(`traefik.eliasfink.de`)
+      service: api@internal

traefik/config/gitea.yml

@@ -0,0 +1,15 @@
+# /services/traefik/config/gitea.yml
+
+http:
+  routers:
+    git:
+      entryPoints:
+        - https
+      rule: Host(`git.eliasfink.de`)
+      service: gitea
+
+  services:
+    gitea:
+      loadBalancer:
+        servers:
+          - url: http://gitea:3000

traefik/config/home.yml

@@ -0,0 +1,18 @@
+# /services/traefik/config/home.yml
+
+http:
+  routers:
+    server:
+      entryPoints:
+        - https
+      rule: Host(`server.eliasfink.de`)
+      middlewares:
+        - home-redirect
+      service: noop@internal
+
+  middlewares:
+    home-redirect:
+      redirectRegex:
+        permanent: true
+        regex: ^.+$
+        replacement: https://eliasfink.de

traefik/config/nextcloud.yml

@@ -0,0 +1,15 @@
+# /services/traefik/config/nextcloud.yml
+
+http:
+  routers:
+    cloud:
+      entryPoints:
+        - https
+      rule: Host(`cloud.eliasfink.de`)
+      service: nextcloud
+
+  services:
+    nextcloud:
+      loadBalancer:
+        servers:
+          - url: http://nextcloud:80

traefik/config/portainer.yml

@@ -0,0 +1,15 @@
+# /services/traefik/config/portainer.yml
+
+http:
+  routers:
+    portainer:
+      entryPoints:
+        - https
+      rule: Host(`portainer.eliasfink.de`)
+      service: portainer
+
+  services:
+    portainer:
+      loadBalancer:
+        servers:
+          - url: http://portainer:9443

traefik/config/security.yml

@@ -0,0 +1,16 @@
+# /services/traefik/config/security.yml
+
+http:
+  middlewares:
+    default-security:
+      chain:
+        middlewares:
+          - secure-headers
+    secure-headers:
+      headers:
+        hostsProxyHeaders:
+          - X-Forwarded-Host
+        stsSeconds: 31536000
+        stsIncludeSubdomains: true
+        stsPreload: true
+        referrerPolicy: same-origin