KAZ/KazV2
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

maj conf traefik pour allowip

Browse Source
This commit is contained in:
HPL 2024-08-16 21:28:32 +02:00
parent 2cae3a6ae3
commit 1dd2858922
3 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
dockers/traefik/conf/allow_ip.yml.sample → dockers/traefik/allow_ip.yml.sample
View File

@ -1,3 +1,5 @@
#garnir le fichier (enlever le 0.0.0.0/0 pour admin par exemple) et le placer
#dans /conf
http: http:
middlewares: middlewares:
ipwhitelist: ipwhitelist:

4
dockers/traefik/docker-compose.tmpl.yml.dist
View File

@ -20,7 +20,7 @@ services:
- TRAEFIK_ENTRYPOINTS_web_HTTP_REDIRECTIONS_ENTRYPOINT_TO=websecure - TRAEFIK_ENTRYPOINTS_web_HTTP_REDIRECTIONS_ENTRYPOINT_TO=websecure
- TRAEFIK_ENTRYPOINTS_websecure_ADDRESS=:443 - TRAEFIK_ENTRYPOINTS_websecure_ADDRESS=:443
- TRAEFIK_ENTRYPOINTS_websecure_HTTP_TLS_CERTRESOLVER=letsencrypt - TRAEFIK_ENTRYPOINTS_websecure_HTTP_TLS_CERTRESOLVER=letsencrypt
- TRAEFIK_ENTRYPOINTS_websecure_HTTP_MIDDLEWARES=hsts@file,test-ipwhitelist@file - TRAEFIK_ENTRYPOINTS_websecure_HTTP_MIDDLEWARES=hsts@file,test-ipallowlist@file
- TRAEFIK_CERTIFICATESRESOLVERS_letsencrypt_ACME_EMAIL=admin@${domain} - TRAEFIK_CERTIFICATESRESOLVERS_letsencrypt_ACME_EMAIL=admin@${domain}
- TRAEFIK_CERTIFICATESRESOLVERS_letsencrypt_ACME_CASERVER=${acme_server} - TRAEFIK_CERTIFICATESRESOLVERS_letsencrypt_ACME_CASERVER=${acme_server}
- TRAEFIK_CERTIFICATESRESOLVERS_letsencrypt_ACME_STORAGE=/letsencrypt/acme.json - TRAEFIK_CERTIFICATESRESOLVERS_letsencrypt_ACME_STORAGE=/letsencrypt/acme.json
@ -35,7 +35,7 @@ services:
- "traefik.http.routers.traefik_https.rule=Host(`${site}.${domain}`)" - "traefik.http.routers.traefik_https.rule=Host(`${site}.${domain}`)"
- "traefik.http.routers.traefik_https.entrypoints=websecure" - "traefik.http.routers.traefik_https.entrypoints=websecure"
- "traefik.http.routers.traefik_https.service=api@internal" - "traefik.http.routers.traefik_https.service=api@internal"
- "traefik.http.routers.traefik_https.middlewares=test-adminipwhitelist@file,traefik-auth" - "traefik.http.routers.traefik_https.middlewares=test-adminipallowlist@file,traefik-auth"
- "traefik.http.middlewares.traefik-auth.basicauth.usersfile=/etc/traefik/passfile" - "traefik.http.middlewares.traefik-auth.basicauth.usersfile=/etc/traefik/passfile"
networks: networks:

4
dockers/traefik/reload.sh
View File

@ -1,4 +0,0 @@
#!/bin/bash
# Do nothing
# Théoriquement traefik gère tout seul sauf les changements dans le traefik.yml