Files
containers/traefik/traefik.yml
2025-09-21 20:20:44 +02:00

168 lines
3.7 KiB
YAML

global:
checkNewVersion: true
sendAnonymousUsage: false
entryPoints:
web:
address: :80
websecure:
address: :443
transport:
respondingTimeouts:
readTimeout: 600s
idleTimeout: 600s
writeTimeout: 600s
metrics:
address: :8082
ssh:
address: :2222
transport:
lifeCycle:
graceTimeOut: 30s
respondingTimeouts:
idleTimeout: 3m
readTimeout: 1m
api:
dashboard: true
metrics:
prometheus:
entryPoint: metrics
addEntryPointsLabels: true
addServicesLabels: true
manualRouting: true
log:
level: INFO
filePath: /var/log/traefik/traefik.log
accessLog:
filePath: /var/log/traefik/access.log
providers:
docker:
endpoint: unix:///var/run/docker.sock
exposedByDefault: false
file:
filename: /etc/traefik/traefik.yml
watch: true
certificatesResolvers:
variomedia:
acme:
email: tim@unkrig.dev
storage: /letsencrypt/acme.json
caServer: https://acme-v02.api.letsencrypt.org/directory
dnsChallenge:
provider: variomedia
delayBeforeCheck: 0
http:
routers:
traefik:
rule: Host(`traefik.unkrig.dev`)
entryPoints:
- websecure
service: api@internal
tls:
certresolver: variomedia
cloud_unkrig_dev:
rule: Host(`cloud.unkrig.dev`)
entryPoints:
- websecure
service: cloud_unkrig_dev
tls:
certresolver: variomedia
middlewares:
- nextcloud-headers
ha_unkrig_dev:
rule: Host(`homeassistant.unkrig.dev`)
entryPoints:
- websecure
service: ha_unkrig_dev
tls:
certresolver: variomedia
rss_unkrig_dev:
rule: Host(`rss.unkrig.dev`)
entryPoints:
- websecure
service: rss_unkrig_dev
tls:
certresolver: variomedia
auth_unkrig_dev:
rule: Host(`auth.unkrig.dev`)
entryPoints:
- websecure
service: auth_unkrig_dev
tls:
certresolver: variomedia
middlewares:
- auth-headers
photos_unkrig_dev:
rule: Host(`photos.unkrig.dev`)
entryPoints:
- websecure
service: photos_unkrig_dev
tls:
certresolver: variomedia
middlewares:
- immich-headers
services:
cloud_unkrig_dev:
loadBalancer:
servers:
- url: http://10.20.1.8:11000
ha_unkrig_dev:
loadBalancer:
servers:
- url: http://10.20.1.20:8123
rss_unkrig_dev:
loadBalancer:
servers:
- url: http://10.20.1.1:80
auth_unkrig_dev:
loadBalancer:
servers:
- url: http://10.20.1.2:9000
photos_unkrig_dev:
loadBalancer:
servers:
- url: http://10.20.1.2:2283
middlewares:
nextcloud-headers:
headers:
hostsProxyHeaders:
- X-Forwarded-Host
referrerPolicy: same-origin
auth-headers:
headers:
hostsProxyHeaders:
- X-Forwarded-Host
referrerPolicy: same-origin
immich-headers:
headers:
# hostsProxyHeaders:
# - X-Forwarded-Host
# referrerPolicy: same-origin
hostsProxyHeaders:
- "X-Forwarded-Host"
customRequestHeaders:
X-Forwarded-Proto: "https"
referrerPolicy: "same-origin"
stsSeconds: 63072000
stsIncludeSubdomains: true
stsPreload: true
forceSTSHeader: true
tcp:
serversTransports:
git_ssh_transport:
terminationDelay: 300
routers:
git_ssh:
entryPoints:
- ssh
service: git_ssh_service
rule: HostSNI(`*`)
services:
git_ssh_service:
loadBalancer:
servers:
- address: 10.20.1.1:2346
serversTransport: git_ssh_transport