Switch Traefik dynamic config files from toml to yaml

2022-07-06 17:34:52 -07:00 · 2022-07-06 17:34:52 -07:00 · 2dc3fa2af1
commit 2dc3fa2af1
parent 5e982e7f7b
7 changed files with 67 additions and 65 deletions
--- a/homelab/server/config/traefik/config/authentik.yaml
+++ b/homelab/server/config/traefik/config/authentik.yaml
@ -1,18 +0,0 @@
-http:
-    middlewares:
-      authentik:
-        forwardauth:
-          address: http://authentik:9000/outpost.goauthentik.io/auth/traefik
-          trustForwardHeader: true
-          authResponseHeaders:
-              - X-authentik-username
-              - X-authentik-groups
-              - X-authentik-email
-              - X-authentik-name
-              - X-authentik-uid
-              - X-authentik-jwt
-              - X-authentik-meta-jwks
-              - X-authentik-meta-outpost
-              - X-authentik-meta-provider
-              - X-authentik-meta-app
-              - X-authentik-meta-version
--- a/homelab/server/config/traefik/config/middlewares.yaml
+++ b/homelab/server/config/traefik/config/middlewares.yaml
@ -0,0 +1,43 @@
+http:
+  middlewares:
+    lan-only:
+      ipWhiteList:
+        - "127.0.0.1/32"
+        - "192.168.1.1/24"
+    simple-auth:
+      basicAuth:
+        usersFile: "/.htpasswd"
+    authentik:
+      forwardauth:
+        address: http://authentik:9000/outpost.goauthentik.io/auth/traefik
+        trustForwardHeader: true
+        authResponseHeaders:
+          - X-authentik-username
+          - X-authentik-groups
+          - X-authentik-email
+          - X-authentik-name
+          - X-authentik-uid
+          - X-authentik-jwt
+          - X-authentik-meta-jwks
+          - X-authentik-meta-outpost
+          - X-authentik-meta-provider
+          - X-authentik-meta-app
+          - X-authentik-meta-version
+    security-headers:
+        headers:
+          customResponseHeaders:
+            X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex"
+            server: ""
+          sslProxyHeaders:
+            X-Forwarded-Proto: https
+          referrerPolicy: "same-origin"
+          hostsProxyHeaders:
+            - "X-Forwarded-Host"
+          customRequestHeaders:
+            X-Forwarded-Proto: "https"
+          contentTypeNosniff: true
+          browserXssFilter: true
+          forceSTSHeader: true
+          stsIncludeSubdomains: true
+          stsSeconds: 63072000
+          stsPreload: true
--- a/homelab/server/config/traefik/config/nas.yaml
+++ b/homelab/server/config/traefik/config/nas.yaml
@ -0,0 +1,16 @@
+http:
+  routers:
+    nas:
+      rule: "Host(`nas.jafner.net`)" 
+      entryPoints: "websecure"
+      middlewares: "lan-only@file"
+      service: "nas@file"
+      tls:
+        certResolver: "lets-encrypt"
+
+  services:
+    nas:
+      loadBalancer:
+        servers:
+          - url: "http://192.168.1.10/"
+      
--- a/homelab/server/config/traefik/config/traefik_api.yaml
+++ b/homelab/server/config/traefik/config/traefik_api.yaml
@ -0,0 +1,8 @@
+http:
+  routers:
+    api:
+      rule: "Host(`traefik.jafner.net`)"
+      entryPoints: "websecure"
+      service: "api@internal"
+      tls:
+        certResolver: "lets-encrypt"
--- a/homelab/server/config/traefik/config/traefik_config_dev.toml
+++ b/homelab/server/config/traefik/config/traefik_config_dev.toml
@ -1,12 +0,0 @@
-[http.routers]
-    [http.routers.dev]
-    rule = "Host(`*.jafner.dev`)"
-    entrypoints = ["websecure"]
-    middlewares = "lan-only@file"
-    service = "dev@file"
-
-
-[http.services]
-  [http.services.dev.loadBalancer]
-    [[http.services.dev.loadBalancer.servers]]
-      url = "http://192.168.1.21/"
--- a/homelab/server/config/traefik/config/traefik_config_dynamic.toml
+++ b/homelab/server/config/traefik/config/traefik_config_dynamic.toml
@ -1,19 +0,0 @@
-[http]
-  [http.routers]
-    [http.routers.api]
-      rule = "Host(`traefik.jafner.net`)"
-      entryPoints = ["websecure"]
-      service = "api@internal"
-      [http.routers.api.tls]
-        certResolver = "lets-encrypt"
-
-  [http.middlewares]
-    [http.middlewares.lan-only]
-      [http.middlewares.lan-only.ipWhiteList]
-        sourceRange = ["127.0.0.1/32", "192.168.1.1/24"]
-    [http.middlewares.simpleauth]
-      [http.middlewares.simpleauth.basicAuth]
-        usersFile = "/.htpasswd"
-
-    
-
--- a/homelab/server/config/traefik/config/traefik_config_nas.toml
+++ b/homelab/server/config/traefik/config/traefik_config_nas.toml
@ -1,16 +0,0 @@
-[http.routers]
-    [http.routers.nas]
-    rule = "Host(`nas.jafner.net`)"
-    entrypoints = ["websecure"]
-    middlewares = "lan-only@file"
-    service = "nas@file"
-    [http.routers.nas.tls]
-        certResolver = "lets-encrypt"
-
-
-[http.services]
-  [http.services.nas.loadBalancer]
-    [[http.services.nas.loadBalancer.servers]]
-      url = "http://192.168.1.10/"
-
-