Inital Commit

2025-10-26 21:11:06 +01:00
commit 45f4e96f60
17 changed files with 1257 additions and 0 deletions
--- a/root/etc/traefik/providers.yml
+++ b/root/etc/traefik/providers.yml
@@ -0,0 +1,131 @@
+# - - - - - HTTP - - - - - #
+
+http:
+  middlewares:
+#    access-device:
+#      ipAllowList:
+#        sourceRange:
+#          - "127.0.0.1/32"
+#          - "::1/128"
+    access-network:
+      ipAllowList:
+        sourceRange:
+          - "10.0.0.0/8"
+          - "172.16.0.0/12"
+          - "192.168.0.0/16"
+          - "fc00::/7"
+    compression:
+      compress:
+        defaultEncoding: gzip
+        minResponseBodyBytes: 256
+    headers:
+      headers:
+        browserXssFilter: true
+        contentTypeNosniff: true
+        forceSTSHeader: true
+        referrerPolicy: strict-origin-when-cross-origin
+        stsIncludeSubdomains: true
+        stsSeconds: 31536000
+  routers:
+    default:
+      entryPoints:
+        - http
+#        - https
+      middlewares:
+        - access-device
+        - compression
+        - headers
+      rule: "Host(\`*\`)"
+      service: default
+#      tls:
+#        certResolver: letsencrypt-ecdsa
+#        domains:
+#          - main: "localhost"
+#            sans:
+#              - "127.0.0.1"
+#              - "::1"
+    proxy-api:
+      entryPoints:
+        - http
+#        - https
+      middlewares:
+        - access-device
+        - headers
+      rule: "Host(\`localhost\`) && PathPrefix(\`/api\`)"
+      service: api@internal
+#      tls:
+#        certResolver: letsencrypt-ecdsa
+#        domains:
+#          - main: "localhost"
+#            sans:
+#              - "127.0.0.1"
+#              - "::1"
+    proxy-dashboard:
+      entryPoints:
+        - http
+#        - https
+      middlewares:
+        - access-device
+        - compression
+        - headers
+      rule: "Host(\`localhost\`)"
+      service: dashboard@internal
+#      tls:
+#        certResolver: letsencrypt-ecdsa
+#        domains:
+#          - main: "localhost"
+#            sans:
+#              - "127.0.0.1"
+#              - "::1"
+  services:
+    default:
+      loadBalancer:
+        servers:
+          - url: "http://localhost"
+
+# - - - - - TCP - - - - - #
+
+#tcp:
+#  middlewares:
+#    access-network:
+#      ipAllowList:
+#        sourceRange:
+#          - "10.0.0.0/8"
+#          - "172.16.0.0/12"
+#          - "192.168.0.0/16"
+#          - "2a02:8109:3115:8d00::/64"
+#          - "fc00::/7"
+#  routers:
+#    example:
+#      entryPoints:
+#        - example-tcp
+#      rule: "HostSNI(\`*\`)"
+#      service: example
+#  services:
+#    example:
+#      loadBalancer:
+#        servers:
+#          - address: "localhost:53"
+
+# - - - - - TLS - - - - - #
+
+#tls:
+#  stores:
+#    default:
+#      defaultCertificate:
+#        certFile: '/etc/ssl/crt/root.crt'
+#        keyFile: '/etc/ssl/key/root.key'
+
+# - - - - - UDP - - - - - #
+
+#udp:
+#  routers:
+#    example:
+#      entryPoints:
+#        - example-udp
+#      service: example
+#  services:
+#    example:
+#      loadBalancer:
+#        servers:
+#          - address: "localhost:53"