forustandCopilot
ed1ddaad5d
Protect public Traefik routes with CrowdSec HTTP decisions and restore access logging for web traffic analysis. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
78 lines
1.7 KiB
YAML
78 lines
1.7 KiB
YAML
# Nextcloud
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: nextcloud-prod
|
|
namespace: nextcloud
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`nextcloud.forust.xyz`)
|
|
kind: Rule
|
|
middlewares:
|
|
- name: nextcloud-chain@file
|
|
- name: crowdsec-bouncer
|
|
namespace: crowdsec
|
|
services:
|
|
- name: nextcloud-apache
|
|
port: 11000
|
|
tls:
|
|
certResolver: letsencrypt
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: nextcloud-local
|
|
namespace: nextcloud
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`nextcloud.workstation.internal`) || Host(`nextcloud.gigaforust.internal`)
|
|
kind: Rule
|
|
middlewares:
|
|
- name: crowdsec-bouncer
|
|
namespace: crowdsec
|
|
- name: nextcloud-chain@file
|
|
services:
|
|
- name: nextcloud-apache
|
|
port: 11000
|
|
# ---
|
|
# Nextcloud AIO
|
|
# apiVersion: traefik.io/v1alpha1
|
|
# kind: IngressRoute
|
|
# metadata:
|
|
# name: naio-prod
|
|
# namespace: nextcloud
|
|
# spec:
|
|
# entryPoints:
|
|
# - websecure
|
|
# routes:
|
|
# - match: Host(`naio.forust.xyz`)
|
|
# kind: Rule
|
|
# services:
|
|
# - name: nextcloud-aio
|
|
# port: 8888
|
|
# scheme: https
|
|
# serversTransport: insecure-transport
|
|
# tls:
|
|
# certResolver: letsencrypt
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: naio-local
|
|
namespace: nextcloud
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`naio.workstation.internal`) || Host(`naio.gigaforust.internal`)
|
|
kind: Rule
|
|
services:
|
|
- name: nextcloud-aio
|
|
port: 8888
|
|
scheme: https
|
|
serversTransport: insecure-transport
|