adds traefik

traefik/traefik.yml

@@ -0,0 +1,167 @@
+global:
+  checkNewVersion: true
+  sendAnonymousUsage: false
+entryPoints:
+  web:
+    address: :80
+  websecure:
+    address: :443
+    transport:
+      respondingTimeouts:
+        readTimeout: 600s
+        idleTimeout: 600s
+        writeTimeout: 600s
+  metrics:
+    address: :8082
+  ssh:
+    address: :2222
+    transport:
+      lifeCycle:
+        graceTimeOut: 30s
+      respondingTimeouts:
+        idleTimeout: 3m
+        readTimeout: 1m
+api:
+  dashboard: true
+metrics:
+  prometheus:
+    entryPoint: metrics
+    addEntryPointsLabels: true
+    addServicesLabels: true
+    manualRouting: true
+log:
+  level: INFO
+  filePath: /var/log/traefik/traefik.log
+accessLog:
+  filePath: /var/log/traefik/access.log
+providers:
+  docker:
+    endpoint: unix:///var/run/docker.sock
+    exposedByDefault: false
+  file:
+    filename: /etc/traefik/traefik.yml
+    watch: true
+certificatesResolvers:
+  variomedia:
+    acme:
+      email: tim@unkrig.dev
+      storage: /letsencrypt/acme.json
+      caServer: https://acme-v02.api.letsencrypt.org/directory
+      dnsChallenge:
+        provider: variomedia
+        delayBeforeCheck: 0
+
+http:
+  routers:
+    traefik:
+      rule: Host(`traefik.unkrig.dev`)
+      entryPoints:
+        - websecure
+      service: api@internal
+      tls:
+        certresolver: variomedia
+    cloud_unkrig_dev:
+      rule: Host(`cloud.unkrig.dev`)
+      entryPoints:
+        - websecure
+      service: cloud_unkrig_dev
+      tls:
+        certresolver: variomedia
+      middlewares:
+        - nextcloud-headers
+    ha_unkrig_dev:
+      rule: Host(`homeassistant.unkrig.dev`)
+      entryPoints:
+        - websecure
+      service: ha_unkrig_dev
+      tls:
+        certresolver: variomedia
+    rss_unkrig_dev:
+      rule: Host(`rss.unkrig.dev`)
+      entryPoints:
+        - websecure
+      service: rss_unkrig_dev
+      tls:
+        certresolver: variomedia
+    auth_unkrig_dev:
+      rule: Host(`auth.unkrig.dev`)
+      entryPoints:
+        - websecure
+      service: auth_unkrig_dev
+      tls:
+        certresolver: variomedia
+      middlewares:
+        - auth-headers
+    photos_unkrig_dev:
+      rule: Host(`photos.unkrig.dev`)
+      entryPoints:
+        - websecure
+      service: photos_unkrig_dev
+      tls:
+        certresolver: variomedia
+      middlewares:
+        - immich-headers
+
+  services:
+    cloud_unkrig_dev:
+      loadBalancer:
+        servers:
+          - url: http://10.20.1.8:11000
+    ha_unkrig_dev:
+      loadBalancer:
+        servers:
+          - url: http://10.20.1.20:8123
+    rss_unkrig_dev:
+      loadBalancer:
+        servers:
+          - url: http://10.20.1.1:80
+    auth_unkrig_dev:
+      loadBalancer:
+        servers:
+          - url: http://10.20.1.2:9000
+    photos_unkrig_dev:
+      loadBalancer:
+        servers:
+          - url: http://10.20.1.2:2283
+  middlewares:
+    nextcloud-headers:
+      headers:
+        hostsProxyHeaders:
+          - X-Forwarded-Host
+        referrerPolicy: same-origin
+    auth-headers:
+      headers:
+        hostsProxyHeaders:
+          - X-Forwarded-Host
+        referrerPolicy: same-origin
+    immich-headers:
+      headers:
+#        hostsProxyHeaders:
+#          - X-Forwarded-Host
+#        referrerPolicy: same-origin
+        hostsProxyHeaders:
+          - "X-Forwarded-Host"
+        customRequestHeaders:
+          X-Forwarded-Proto: "https"
+        referrerPolicy: "same-origin"
+        stsSeconds: 63072000
+        stsIncludeSubdomains: true
+        stsPreload: true
+        forceSTSHeader: true
+
+tcp:
+  serversTransports:
+    git_ssh_transport:
+      terminationDelay: 300
+  routers:
+    git_ssh:
+      entryPoints:
+        - ssh
+      service: git_ssh_service
+      rule: HostSNI(`*`)
+  services:
+    git_ssh_service:
+      loadBalancer:
+        servers:
+          - address: 10.20.1.1:2346
+        serversTransport: git_ssh_transport