Compare commits

...

6 Commits

13 changed files with 54 additions and 20 deletions

4
.gitignore vendored
View File

@@ -5,5 +5,5 @@ data
db
# Files
.dashboardUsers
.env
.env
.users

View File

@@ -1,4 +1,4 @@
# /services/traefik/config/dashboard.yml
# /services/traefik/config/dashboard/dashboard.yml
http:
routers:
@@ -13,4 +13,4 @@ http:
middlewares:
traefik-dashboard-auth:
digestAuth:
usersFile: /etc/traefik/config/.dashboardUsers
usersFile: /etc/traefik/config/dashboard/.users

View File

@@ -7,11 +7,11 @@ http:
- https
rule: Host(`server.eliasfink.de`)
middlewares:
- home-redirect
- home-redirection
service: noop@internal
middlewares:
home-redirect:
home-redirection:
redirectRegex:
permanent: true
regex: ^.+$

View File

@@ -0,0 +1,10 @@
# /services/traefik/config/middlewares/default-chain.yml
http:
middlewares:
default-chain:
chain:
middlewares:
# - favicon-html-injection
- favicon-ico-redirection
- security-headers

View File

@@ -0,0 +1,22 @@
# /services/traefik/config/middlewares/favicon.yml
http:
middlewares:
# favicon-html-injection:
# plugin:
# rewritebody:
# lastModified: true
# rewrites:
# - regex: <\/head>
# replacement: |
# <link rel="icon" type="image/png" sizes="96x96" href="https://static.eliasfink.de/img/favicon/favicon-96x96.png"/>
# <link rel="icon" type="image/svg+xml" href="https://static.eliasfink.de/img/favicon/favicon.svg"/>
# <link rel="shortcut icon" href="https://static.eliasfink.de/img/favicon/favicon.ico"/>
# <link rel="apple-touch-icon" sizes="180x180" href="https://static.eliasfink.de/img/favicon/apple-touch-icon.png"/>
# <link rel="manifest" href="https://static.eliasfink.de/img/favicon/site.webmanifest"/>
# </head>
favicon-ico-redirection:
redirectRegex:
permanent: true
regex: ^.+\/favicon\.ico$
replacement: https://static.eliasfink.de/img/favicon/favicon.ico

View File

@@ -1,12 +1,8 @@
# /services/traefik/config/security.yml
# /services/traefik/config/middlewares/security-headers.yml
http:
middlewares:
default-security:
chain:
middlewares:
- secure-headers
secure-headers:
security-headers:
headers:
hostsProxyHeaders:
- X-Forwarded-Host

View File

@@ -1,4 +1,4 @@
# /services/traefik/config/gitea.yml
# /services/traefik/config/services/gitea.yml
http:
routers:

View File

@@ -1,4 +1,4 @@
# /services/traefik/config/hedgedoc.yml
# /services/traefik/config/services/hedgedoc.yml
http:
routers:

View File

@@ -1,4 +1,4 @@
# /services/traefik/config/home-assistant.yml
# /services/traefik/config/services/home-assistant.yml
http:
routers:

View File

@@ -1,4 +1,4 @@
# /services/traefik/config/nextcloud.yml
# /services/traefik/config/services/nextcloud.yml
http:
routers:

View File

@@ -1,4 +1,4 @@
# /services/traefik/config/portainer.yml
# /services/traefik/config/services/portainer.yml
http:
routers:

View File

@@ -1,4 +1,4 @@
# /services/traefik/config/uptime-kuma.yml
# /services/traefik/config/services/uptime-kuma.yml
http:
routers:

View File

@@ -18,7 +18,7 @@ entryPoints:
address: :443
http:
middlewares:
- default-security
- default-chain
tls:
certResolver: letsencrypt
@@ -33,4 +33,10 @@ certificatesResolvers:
# caServer: https://acme-staging-v02.api.letsencrypt.org/directory # use staging server instead of production
email: mail@eliasfink.de
storage: /etc/traefik/certs/acme.json
tlsChallenge: {}
tlsChallenge: {}
experimental:
plugins:
rewritebody:
moduleName: "github.com/traefik/plugin-rewritebody"
version: "v0.3.1"