workaround for traefik bug
- XFO/Ref policy can't be applied yet
This commit is contained in:
parent
fc1a2d544c
commit
357256cd11
|
@ -9,6 +9,12 @@ defaultEntryPoints = ["http", "https"]
|
||||||
# This is required for ACME support
|
# This is required for ACME support
|
||||||
[entryPoints.https.tls]
|
[entryPoints.https.tls]
|
||||||
|
|
||||||
|
[docker]
|
||||||
|
endpoint = "unix:///var/run/docker.sock"
|
||||||
|
domain = "bb8.fun"
|
||||||
|
watch = true
|
||||||
|
exposedbydefault = false
|
||||||
|
|
||||||
[file]
|
[file]
|
||||||
[backends]
|
[backends]
|
||||||
|
|
||||||
|
@ -36,7 +42,6 @@ defaultEntryPoints = ["http", "https"]
|
||||||
SSLRedirect = true
|
SSLRedirect = true
|
||||||
SSLTemporaryRedirect = true
|
SSLTemporaryRedirect = true
|
||||||
STSSeconds = 2592000
|
STSSeconds = 2592000
|
||||||
CustomFrameOptionsValue = "ALLOW-FROM https://muximux.bb8.fun/"
|
|
||||||
ContentTypeNosniff = true
|
ContentTypeNosniff = true
|
||||||
BrowserXssFilter = true
|
BrowserXssFilter = true
|
||||||
ReferrerPolicy = "no-referrer"
|
ReferrerPolicy = "no-referrer"
|
||||||
|
@ -100,8 +105,4 @@ sans = [
|
||||||
"ebooks.bb8.fun",
|
"ebooks.bb8.fun",
|
||||||
]
|
]
|
||||||
|
|
||||||
[docker]
|
|
||||||
domain = "bb8.fun"
|
|
||||||
watch = true
|
|
||||||
exposedbydefault = false
|
|
||||||
|
|
||||||
|
|
|
@ -7,13 +7,12 @@ resource docker_container "transmission" {
|
||||||
"traefik.port" = 9091
|
"traefik.port" = 9091
|
||||||
"traefik.enable" = "true"
|
"traefik.enable" = "true"
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
"traefik.frontend.headers.STSSeconds" = "${var.hsts_max_age}"
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
"traefik.frontend.headers.customFrameOptionsValue" = "${var.xfo_allow}"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
"traefik.frontend.headers.referrerPolicy" = "${var.refpolicy}"
|
# "traefik.frontend.headers.referrerPolicy" = "no-referrer"
|
||||||
"traefik.frontend.headers.customresponseheaders" = "${var.xpoweredby}"
|
"traefik.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
|
||||||
}
|
}
|
||||||
|
|
||||||
ports {
|
ports {
|
||||||
|
@ -63,13 +62,12 @@ resource docker_container "gitea" {
|
||||||
"traefik.port" = 3000
|
"traefik.port" = 3000
|
||||||
"traefik.enable" = "true"
|
"traefik.enable" = "true"
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
"traefik.frontend.headers.STSSeconds" = "${var.hsts_max_age}"
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
"traefik.frontend.headers.customFrameOptionsValue" = "${var.xfo_allow}"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
"traefik.frontend.headers.referrerPolicy" = "${var.refpolicy}"
|
# "traefik.frontend.headers.referrerPolicy" = "no-referrer"
|
||||||
"traefik.frontend.headers.customresponseheaders" = "${var.xpoweredby}"
|
"traefik.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
|
||||||
}
|
}
|
||||||
|
|
||||||
ports {
|
ports {
|
||||||
|
@ -143,13 +141,12 @@ resource "docker_container" "emby" {
|
||||||
"traefik.port" = 8096
|
"traefik.port" = 8096
|
||||||
"traefik.enable" = "true"
|
"traefik.enable" = "true"
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
"traefik.frontend.headers.STSSeconds" = "${var.hsts_max_age}"
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
"traefik.frontend.headers.customFrameOptionsValue" = "${var.xfo_allow}"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
"traefik.frontend.headers.referrerPolicy" = "${var.refpolicy}"
|
# "traefik.frontend.headers.referrerPolicy" = "no-referrer"
|
||||||
"traefik.frontend.headers.customresponseheaders" = "${var.xpoweredby}"
|
"traefik.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
|
||||||
}
|
}
|
||||||
|
|
||||||
memory = 2048
|
memory = 2048
|
||||||
|
@ -191,13 +188,12 @@ resource "docker_container" "flexget" {
|
||||||
"traefik.port" = 5050
|
"traefik.port" = 5050
|
||||||
"traefik.enable" = "true"
|
"traefik.enable" = "true"
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
"traefik.frontend.headers.STSSeconds" = "${var.hsts_max_age}"
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
"traefik.frontend.headers.customFrameOptionsValue" = "${var.xfo_allow}"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
"traefik.frontend.headers.referrerPolicy" = "${var.refpolicy}"
|
# "traefik.frontend.headers.referrerPolicy" = "no-referrer"
|
||||||
"traefik.frontend.headers.customresponseheaders" = "${var.xpoweredby}"
|
"traefik.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
|
||||||
}
|
}
|
||||||
|
|
||||||
memory = 256
|
memory = 256
|
||||||
|
@ -239,13 +235,12 @@ resource "docker_container" "couchpotato" {
|
||||||
"traefik.port" = 5050
|
"traefik.port" = 5050
|
||||||
"traefik.enable" = "true"
|
"traefik.enable" = "true"
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
"traefik.frontend.headers.STSSeconds" = "${var.hsts_max_age}"
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
"traefik.frontend.headers.customFrameOptionsValue" = "${var.xfo_allow}"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
"traefik.frontend.headers.referrerPolicy" = "${var.refpolicy}"
|
# "traefik.frontend.headers.referrerPolicy" = "no-referrer"
|
||||||
"traefik.frontend.headers.customresponseheaders" = "${var.xpoweredby}"
|
"traefik.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
|
||||||
}
|
}
|
||||||
|
|
||||||
memory = 256
|
memory = 256
|
||||||
|
@ -368,13 +363,11 @@ resource "docker_container" "airsonic" {
|
||||||
"traefik.port" = 4040
|
"traefik.port" = 4040
|
||||||
"traefik.enable" = "true"
|
"traefik.enable" = "true"
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
"traefik.frontend.headers.STSSeconds" = "${var.hsts_max_age}"
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
"traefik.frontend.headers.customFrameOptionsValue" = "${var.xfo_allow}"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
"traefik.frontend.headers.referrerPolicy" = "${var.refpolicy}"
|
"traefik.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
|
||||||
"traefik.frontend.headers.customresponseheaders" = "${var.xpoweredby}"
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -407,13 +400,12 @@ resource "docker_container" "sickrage" {
|
||||||
"traefik.port" = 8081
|
"traefik.port" = 8081
|
||||||
"traefik.enable" = "true"
|
"traefik.enable" = "true"
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
"traefik.frontend.headers.STSSeconds" = "${var.hsts_max_age}"
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
"traefik.frontend.headers.customFrameOptionsValue" = "${var.xfo_allow}"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
"traefik.frontend.headers.referrerPolicy" = "${var.refpolicy}"
|
# "traefik.frontend.headers.referrerPolicy" = "no-referrer"
|
||||||
"traefik.frontend.headers.customresponseheaders" = "${var.xpoweredby}"
|
"traefik.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
|
||||||
}
|
}
|
||||||
|
|
||||||
env = [
|
env = [
|
||||||
|
@ -452,13 +444,12 @@ resource "docker_container" "headphones" {
|
||||||
"traefik.port" = 8181
|
"traefik.port" = 8181
|
||||||
"traefik.enable" = "true"
|
"traefik.enable" = "true"
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
"traefik.frontend.headers.STSSeconds" = "${var.hsts_max_age}"
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
"traefik.frontend.headers.customFrameOptionsValue" = "${var.xfo_allow}"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
"traefik.frontend.headers.referrerPolicy" = "${var.refpolicy}"
|
# "traefik.frontend.headers.referrerPolicy" = "no-referrer"
|
||||||
"traefik.frontend.headers.customresponseheaders" = "${var.xpoweredby}"
|
"traefik.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
|
||||||
}
|
}
|
||||||
|
|
||||||
# lounge:tatooine
|
# lounge:tatooine
|
||||||
|
@ -498,16 +489,17 @@ resource "docker_container" "wiki" {
|
||||||
}
|
}
|
||||||
|
|
||||||
labels {
|
labels {
|
||||||
|
"traefik.frontend.rule" = "Host:wiki.bb8.fun"
|
||||||
|
"traefik.frontend.passHostHeader" = "true"
|
||||||
"traefik.port" = 9999
|
"traefik.port" = 9999
|
||||||
"traefik.enable" = "true"
|
"traefik.enable" = "true"
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
"traefik.frontend.headers.STSSeconds" = "${var.hsts_max_age}"
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
"traefik.frontend.headers.customFrameOptionsValue" = "${var.xfo_allow}"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
"traefik.frontend.headers.referrerPolicy" = "${var.refpolicy}"
|
# "traefik.frontend.headers.referrerPolicy" = "no-referrer"
|
||||||
"traefik.frontend.headers.customresponseheaders" = "${var.xpoweredby}"
|
"traefik.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
|
||||||
}
|
}
|
||||||
|
|
||||||
env = [
|
env = [
|
||||||
|
@ -560,13 +552,13 @@ resource "docker_container" "muximux" {
|
||||||
"traefik.port" = 80
|
"traefik.port" = 80
|
||||||
"traefik.enable" = "true"
|
"traefik.enable" = "true"
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
"traefik.frontend.headers.STSSeconds" = "${var.hsts_max_age}"
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
"traefik.frontend.headers.customFrameOptionsValue" = "${var.xfo_allow}"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
"traefik.frontend.headers.referrerPolicy" = "${var.refpolicy}"
|
# "traefik.frontend.headers.CustomFrameOptionsValue" = "ALLOW-FROM https://muximux.bb8.fun/"
|
||||||
"traefik.frontend.headers.customresponseheaders" = "${var.xpoweredby}"
|
# "traefik.frontend.headers.referrerPolicy" = "no-referrer"
|
||||||
|
"traefik.frontend.headers.customresponseheaders" = "X-Powered-By:Allomancy,X-Server:Blackbox"
|
||||||
}
|
}
|
||||||
|
|
||||||
# lounge:tatooine
|
# lounge:tatooine
|
||||||
|
|
Loading…
Reference in New Issue