infrastructure/ansible/plays/services/traefik/dynamic.yaml

49 lines
1.2 KiB
YAML
Raw Normal View History

2022-10-01 15:34:55 +02:00
http:
middlewares:
2023-08-10 14:16:30 +02:00
metrics-ipwhitelist:
ipWhiteList:
sourceRange:
- "127.0.0.1/32"
- "192.168.0.0/16"
- "172.16.0.0/16"
2023-08-10 16:29:52 +02:00
- "10.254.1.0/16"
2023-04-09 22:08:47 +02:00
auth-headers:
headers:
sslRedirect: true
stsSeconds: 315360000
browserXssFilter: true
contentTypeNosniff: true
forceSTSHeader: true
sslHost: tobiasmanske.de
stsIncludeSubdomains: true
stsPreload: true
frameDeny: true
oauth-auth:
2022-10-01 15:34:55 +02:00
forwardAuth:
2023-04-09 22:08:47 +02:00
address: https://traefik-fa.tobiasmanske.de/oauth2/auth
trustForwardHeader: true
oauth-errors:
errors:
status:
- "401-403"
service: oauth@docker
query: "/oauth2/sign_in"
oauth:
chain:
middlewares:
- oauth-errors
- oauth-auth
deny-metrics:
replacePathRegex:
regex: "^/metrics$"
replacement: "/"
2023-09-25 22:34:28 +02:00
hsts:
headers:
contentTypeNosniff: true
browserXssFilter: true
forceSTSHeader: true
sslRedirect: true
stsPreload: true
stsSeconds: 315360000
stsIncludeSubdomains: true