Switch to common traefik labels for radicale
This commit is contained in:
parent
b89320a185
commit
85832d4ad0
1
main.tf
1
main.tf
|
@ -31,6 +31,7 @@ module "docker" {
|
||||||
module "radicale" {
|
module "radicale" {
|
||||||
source = "radicale"
|
source = "radicale"
|
||||||
domain = "radicale.bb8.fun"
|
domain = "radicale.bb8.fun"
|
||||||
|
traefik-labels = "${var.traefik-common-labels}"
|
||||||
}
|
}
|
||||||
|
|
||||||
module "tt-rss" {
|
module "tt-rss" {
|
||||||
|
|
|
@ -11,17 +11,11 @@ resource docker_container "radicale" {
|
||||||
name = "radicale"
|
name = "radicale"
|
||||||
image = "${docker_image.radicale.latest}"
|
image = "${docker_image.radicale.latest}"
|
||||||
|
|
||||||
labels {
|
labels = "${merge(
|
||||||
"traefik.port" = 5232
|
var.traefik-labels, map(
|
||||||
"traefik.enable" = "true"
|
"traefik.port", 5232,
|
||||||
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
"traefik.frontend.rule","Host:${var.domain}"
|
||||||
"traefik.frontend.headers.STSSeconds" = "2592000"
|
))}"
|
||||||
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
|
||||||
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
|
||||||
"traefik.frontend.headers.browserXSSFilter" = "true"
|
|
||||||
"traefik.frontend.passHostHeader" = "true"
|
|
||||||
"traefik.frontend.rule" = "Host:${var.domain}"
|
|
||||||
}
|
|
||||||
|
|
||||||
volumes {
|
volumes {
|
||||||
host_path = "/mnt/xwing/data/radicale"
|
host_path = "/mnt/xwing/data/radicale"
|
||||||
|
|
|
@ -1,3 +1,7 @@
|
||||||
variable "domain" {
|
variable "domain" {
|
||||||
type = "string"
|
type = "string"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
variable "traefik-labels" {
|
||||||
|
type = "map"
|
||||||
|
}
|
||||||
|
|
21
variables.tf
21
variables.tf
|
@ -45,3 +45,24 @@ variable "gitea-secret-key" {}
|
||||||
variable "gitea-internal-token" {}
|
variable "gitea-internal-token" {}
|
||||||
variable "gitea-smtp-password" {}
|
variable "gitea-smtp-password" {}
|
||||||
variable "digitalocean-token" {}
|
variable "digitalocean-token" {}
|
||||||
|
|
||||||
|
variable "traefik-common-labels" {
|
||||||
|
type = "map"
|
||||||
|
|
||||||
|
default = {
|
||||||
|
"traefik.enable" = "true"
|
||||||
|
|
||||||
|
// HSTS
|
||||||
|
"traefik.frontend.headers.SSLTemporaryRedirect" = "true"
|
||||||
|
"traefik.frontend.headers.STSSeconds" = "2592000"
|
||||||
|
"traefik.frontend.headers.STSIncludeSubdomains" = "false"
|
||||||
|
|
||||||
|
// X-Powered-By, Server headers
|
||||||
|
"traefik.frontend.headers.customResponseHeaders" = "X-Powered-By:Allomancy||X-Server:Blackbox"
|
||||||
|
|
||||||
|
// X-Frame-Options
|
||||||
|
"traefik.frontend.headers.customFrameOptionsValue" = "ALLOW-FROM https://home.bb8.fun/"
|
||||||
|
"traefik.frontend.headers.contentTypeNosniff" = "true"
|
||||||
|
"traefik.frontend.headers.browserXSSFilter" = "true"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
Loading…
Reference in New Issue