forustandCopilot
ed1ddaad5d
Protect public Traefik routes with CrowdSec HTTP decisions and restore access logging for web traffic analysis. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
62 lines
1.3 KiB
YAML
62 lines
1.3 KiB
YAML
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: gitea-prod
|
|
namespace: gitea
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`gitea.forust.xyz`)
|
|
kind: Rule
|
|
middlewares:
|
|
- name: crowdsec-bouncer
|
|
namespace: crowdsec
|
|
services:
|
|
- name: gitea-service
|
|
port: 3000
|
|
- match: Host(`gcr.forust.xyz`) && PathPrefix(`/v2`)
|
|
kind: Rule
|
|
middlewares:
|
|
- name: crowdsec-bouncer
|
|
namespace: crowdsec
|
|
services:
|
|
- name: gitea-service
|
|
port: 3000
|
|
tls:
|
|
certResolver: letsencrypt
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: gitea-local
|
|
namespace: gitea
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`gitea.workstation.internal`) || Host(`gitea.gigaforust.internal`)
|
|
kind: Rule
|
|
services:
|
|
- name: gitea-service
|
|
port: 3000
|
|
- match: (Host(`gcr.workstation.internal`) || Host(`gcr.gigaforust.internal`)) && PathPrefix(`/v2`)
|
|
kind: Rule
|
|
services:
|
|
- name: gitea-service
|
|
port: 3000
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRouteTCP
|
|
metadata:
|
|
name: gitea-ssh
|
|
namespace: gitea
|
|
spec:
|
|
entryPoints:
|
|
- ssh
|
|
routes:
|
|
- match: HostSNI(`*`)
|
|
services:
|
|
- name: gitea-service
|
|
port: 2221
|