Inital Commit

root/etc/traefik/providers.yml

@@ -0,0 +1,131 @@
+# - - - - - HTTP - - - - - #
+
+http:
+  middlewares:
+#    access-device:
+#      ipAllowList:
+#        sourceRange:
+#          - "127.0.0.1/32"
+#          - "::1/128"
+    access-network:
+      ipAllowList:
+        sourceRange:
+          - "10.0.0.0/8"
+          - "172.16.0.0/12"
+          - "192.168.0.0/16"
+          - "fc00::/7"
+    compression:
+      compress:
+        defaultEncoding: gzip
+        minResponseBodyBytes: 256
+    headers:
+      headers:
+        browserXssFilter: true
+        contentTypeNosniff: true
+        forceSTSHeader: true
+        referrerPolicy: strict-origin-when-cross-origin
+        stsIncludeSubdomains: true
+        stsSeconds: 31536000
+  routers:
+    default:
+      entryPoints:
+        - http
+#        - https
+      middlewares:
+        - access-device
+        - compression
+        - headers
+      rule: "Host(\`*\`)"
+      service: default
+#      tls:
+#        certResolver: letsencrypt-ecdsa
+#        domains:
+#          - main: "localhost"
+#            sans:
+#              - "127.0.0.1"
+#              - "::1"
+    proxy-api:
+      entryPoints:
+        - http
+#        - https
+      middlewares:
+        - access-device
+        - headers
+      rule: "Host(\`localhost\`) && PathPrefix(\`/api\`)"
+      service: api@internal
+#      tls:
+#        certResolver: letsencrypt-ecdsa
+#        domains:
+#          - main: "localhost"
+#            sans:
+#              - "127.0.0.1"
+#              - "::1"
+    proxy-dashboard:
+      entryPoints:
+        - http
+#        - https
+      middlewares:
+        - access-device
+        - compression
+        - headers
+      rule: "Host(\`localhost\`)"
+      service: dashboard@internal
+#      tls:
+#        certResolver: letsencrypt-ecdsa
+#        domains:
+#          - main: "localhost"
+#            sans:
+#              - "127.0.0.1"
+#              - "::1"
+  services:
+    default:
+      loadBalancer:
+        servers:
+          - url: "http://localhost"
+
+# - - - - - TCP - - - - - #
+
+#tcp:
+#  middlewares:
+#    access-network:
+#      ipAllowList:
+#        sourceRange:
+#          - "10.0.0.0/8"
+#          - "172.16.0.0/12"
+#          - "192.168.0.0/16"
+#          - "2a02:8109:3115:8d00::/64"
+#          - "fc00::/7"
+#  routers:
+#    example:
+#      entryPoints:
+#        - example-tcp
+#      rule: "HostSNI(\`*\`)"
+#      service: example
+#  services:
+#    example:
+#      loadBalancer:
+#        servers:
+#          - address: "localhost:53"
+
+# - - - - - TLS - - - - - #
+
+#tls:
+#  stores:
+#    default:
+#      defaultCertificate:
+#        certFile: '/etc/ssl/crt/root.crt'
+#        keyFile: '/etc/ssl/key/root.key'
+
+# - - - - - UDP - - - - - #
+
+#udp:
+#  routers:
+#    example:
+#      entryPoints:
+#        - example-udp
+#      service: example
+#  services:
+#    example:
+#      loadBalancer:
+#        servers:
+#          - address: "localhost:53"

root/etc/traefik/traefik.yml

@@ -0,0 +1,83 @@
+# - - - - - Access Log - - - - - #
+
+accessLog:
+  filePath: '/var/log/traefik/access.log'
+  bufferingSize: 0
+
+# - - - - - API - - - - - #
+
+api:
+  disableDashboardAd: true
+
+# - - - - - Certificates Resolver - - - - - #
+
+#certificatesResolvers:
+#  letsencrypt-rsa:
+#    acme:
+#      email: "<EMAIL>"
+#      storage: '/var/lib/traefik/acme.json'
+#      keyType: RSA4096
+#      dnsChallenge:
+#        resolvers:
+#          - "localhost:53"
+#        propagation:
+#          delayBeforeChecks: 60s
+#          requireAllRNS: true
+#        provider: <PROVIDER>
+#  letsencrypt-ecdsa:
+#    acme:
+#      email: "<EMAIL>"
+#      storage: '/var/lib/traefik/acme.json'
+#      keyType: EC384
+#      dnsChallenge:
+#        resolvers:
+#          - "localhost:53"
+#        propagation:
+#          delayBeforeChecks: 60s
+#          requireAllRNS: true
+#        provider: <PROVIDER>
+
+# - - - - - Entry Points - - - - - #
+
+entryPoints:
+#  example-tcp:
+#    address: ':60788'
+#  example-udp:
+#    address: '53689:/udp'
+#    udp:
+#      timeout: 1s
+  http:
+    address: ':80'
+#    http:
+#      redirections:
+#        entryPoint:
+#          to: https
+#          scheme: https
+#  https:
+#    address: ':443'
+#    http3:
+#      advertisedPort: '443'
+#    observability:
+#      accessLogs: true
+
+# - - - - - Log - - - - - #
+
+log:
+  filePath: '/var/log/traefik/error.log'
+  level: ERROR
+  maxAge: 7
+  maxSize: 32
+
+# - - - - - Providers - - - - - #
+
+providers:
+  file:
+    filename: '/etc/traefik/providers.yml'
+    watch: true
+
+# - - - - - TLS - - - - - #
+
+tls:
+  options:
+    default:
+      sniStrict: true