Source Code for the Home Server setup. This includes the git server hosting this repository as well. #terraform #docker https://git.captnemo.in/nemo/nebula/

traefik.toml 2.1KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495
  1. defaultEntryPoints = ["http", "https"]
  2. # logLevel = "DEBUG"
  3. # Have to enable this because of heimdall
  4. InsecureSkipVerify = true
  5. sendAnonymousUsage = true
  6. checkNewVersion = false
  7. [traefikLog]
  8. [accessLog]
  9. [entryPoints]
  10. [entryPoints.http]
  11. address = ":80"
  12. [entryPoints.http.redirect]
  13. entryPoint = "https"
  14. [entryPoints.https]
  15. address = ":443"
  16. # This is required for ACME support
  17. [entryPoints.https.tls]
  18. [[entryPoints.https.tls.certificates]]
  19. certFile = "/etc/traefik/git.captnemo.in.crt"
  20. keyFile = "/etc/traefik/git.captnemo.in.key"
  21. [[entryPoints.https.tls.certificates]]
  22. certFile = "/etc/traefik/rss.captnemo.in.crt"
  23. keyFile = "/etc/traefik/rss.captnemo.in.key"
  24. [docker]
  25. # Make sure you mount this as readonly
  26. endpoint = "unix:///var/run/docker.sock"
  27. domain = "bb8.fun"
  28. watch = true
  29. exposedbydefault = false
  30. [file]
  31. [backends]
  32. # This is currently not exposed
  33. # Since I can't apply a authentication
  34. # on this yet
  35. [backends.elibsrv]
  36. [backends.elibsrv.servers.default]
  37. url = "http://elibsrv.captnemo.in:90"
  38. [backends.scan]
  39. [backends.scan.servers.default]
  40. url = "http://scan.in.bb8.fun:90"
  41. [frontends]
  42. [frontends.scan]
  43. backend = "scan"
  44. [frontends.scan.headers]
  45. SSLRedirect = true
  46. SSLTemporaryRedirect = true
  47. STSSeconds = 2592000
  48. FrameDeny = true
  49. ContentTypeNosniff = true
  50. BrowserXssFilter = true
  51. ReferrerPolicy = "no-referrer"
  52. [frontends.scan.headers.customresponseheaders]
  53. X-Powered-By = "Allomancy"
  54. Server = "BlackBox"
  55. X-Clacks-Overhead = "GNU Terry Pratchett"
  56. [frontends.scan.routes.domain]
  57. rule = "Host:scan.bb8.fun"
  58. [web]
  59. address = ":1111"
  60. readOnly = true
  61. # To enable Traefik to export internal metrics to Prometheus
  62. [web.metrics.prometheus]
  63. [acme]
  64. email = "acme@captnemo.in"
  65. storage = "/acme/acme.json"
  66. entryPoint = "https"
  67. onHostRule = false
  68. onDemand = false
  69. acmelogging = true
  70. [acme.httpChallenge]
  71. entryPoint = "http"
  72. [acme.dnsChallenge]
  73. provider = "cloudflare"
  74. delayBeforeCheck = 30
  75. # Primary 2 wildcard certs
  76. [[acme.domains]]
  77. main = "*.bb8.fun"
  78. # Internal services are also protected!
  79. [[acme.domains]]
  80. main = "*.in.bb8.fun"