re init

2024-02-03 11:58:42 +01:00
parent 17ca1c805f
commit 5b0b5f548c
706 changed files with 135245 additions and 0 deletions
@@ -0,0 +1,2 @@
+DOMAIN_NAME=knast.cc
+DEFAULT_NETWORK=traefik
@@ -0,0 +1,41 @@
+
+version: "3"
+
+services:
+  traefik:
+    image: "traefik:v2.3"
+    container_name: "traefik"
+    hostname: "traefik"
+    env_file:
+      - .env
+    ports:
+      - "80:80"
+      - "443:443"
+      - "8080:8080"
+
+    volumes:
+      - "/var/run/docker.sock:/var/run/docker.sock:ro"
+      - "./traefik.yml:/traefik.yml:ro"
+      - /var/log/traefik/:/opt/traefik/logs
+      - /etc/letsencrypt/:/etc/letsencrypt/
+    command: 
+      - --api.insecure=false 
+      # - --api.insecure=true 
+    restart: unless-stopped
+    labels:
+        - "traefik.enable=true"
+        - "traefik.port=8080"
+        # - "traefik.http.routers.traefiks.entrypoints=websecure"
+        # - "traefik.http.routers.traefiks.rule=Host(`monitor.$DOMAIN_NAME`)"
+        # - "traefik.http.routers.traefiks.tls.certresolver=letsencr"
+        # - "traefik.http.middlewares.auth.basicauth.users=admin:$$2a$12$2fgQL6tIUB7qwKVQPrhUQew3wZ3noWmLt5dmyk.KWDcuZR5vs01wO"
+        # - "traefik.http.routers.traefiks.middlewares=auth"
+        - traefik.http.middlewares.https_redirect.redirectscheme.scheme=https
+        - traefik.http.middlewares.https_redirect.redirectscheme.permanent=true
+        - traefik.http.routers.http_catchall.rule=HostRegexp(`{any:.+}`)
+        - traefik.http.routers.http_catchall.entrypoints=web
+        - traefik.http.routers.http_catchall.middlewares=https_redirect
+networks:
+  default:
+    external:
+      name: $DEFAULT_NETWORK
@@ -0,0 +1,36 @@
+## STATIC CONFIGURATION
+log:
+  level: INFO
+  filePath: /opt/traefik/logs/system.log
+  format: json
+accessLog:
+  filePath: "/opt/traefik/logs/access.log"
+
+serversTransport:
+  insecureSkipVerify: true
+
+# api:
+#   insecure: true
+#   dashboard: false
+
+entryPoints:
+  web:
+    address: ":80"
+  websecure:
+    address: ":443"
+
+providers:
+  docker:
+    endpoint: "unix:///var/run/docker.sock"
+    exposedByDefault: false
+
+certificatesResolvers:
+  letsencr:
+    acme:
+      storage: 'acme.json'
+      # storage: '/letsencrypt/acme.json'
+      email: stokogsten@gmail.com
+      httpChallenge:
+        entryPoint: web
+pilot:
+    token: "adfb2efb-ef4d-419f-b012-a7f4825d22fd"
@@ -0,0 +1,37 @@
+http:
+  middlewares:
+    redirect-http-https:
+      redirectScheme:
+        scheme: https
+        permanent: true
+        port: 443
+
+    ratelimit-300-50:
+      rateLimit:
+        average: 300
+        burst: 50
+
+    ratelimit-1-5:
+      rateLimit:
+        average: 1
+        burst: 5
+
+    # strip-path-traefik:
+    #   chain:
+    #     middlewares:
+    #       - fix-trailing-slash-traefik
+    #       - remove-path-traefik
+
+    # fix-trailing-slash-traefik:
+    #   redirectRegex:
+    #     regex: "^(http[s0-1]?://[^/]+/[a-z0-9_]+)$"
+    #     replacement: "${1}/"
+    #     permanent: true
+
+    # add-prefix-tiles:
+    #   addPrefix:
+    #     prefix: "/tiles"
+
+    # add-prefix-wps:
+    #   addPrefix:
+    #     prefix: "/cgi-bin/zoo_loader.cgi"