Refactor Traefik configurations for multiple services and add new Nextcloud AIO setup

TEST
2025-11-11 20:22:45 +01:00
parent d403a775b8
commit be6992d9e2
9 changed files with 247 additions and 66 deletions
@@ -0,0 +1,157 @@
+http:
+  routers:
+    # Traefik Dashboard
+    traefik-dashboard:
+      rule: "Host(`traefik.workstation`)"
+      entryPoints:
+        - websecure
+      service: api@internal
+      tls:
+        certResolver: le
+
+    # Portainer
+    portainer:
+      rule: "Host(`portainer.workstation`)"
+      entryPoints:
+        - websecure
+      service: portainer
+      tls:
+        certResolver: le
+
+    # AdGuard Home
+    adguard-redirect:
+      rule: "Host(`adguard.workstation`)"
+      entryPoints:
+        - web
+      middlewares:
+        - redirect-https
+      service: adguard
+
+    adguard-secure:
+      rule: "Host(`adguard.workstation`)"
+      entryPoints:
+        - websecure
+      service: adguard
+      tls:
+        certResolver: le
+
+    # Nextcloud AIO Interface
+    nextcloud-aio:
+      rule: "Host(`nextcloud-aio.workstation`)"
+      entryPoints:
+        - websecure
+      service: nextcloud-aio
+      tls:
+        certResolver: le
+
+    # Nextcloud Main
+    nextcloud:
+      rule: "Host(`nextcloud.workstation`)"
+      entryPoints:
+        - websecure
+      service: nextcloud
+      tls:
+        certResolver: le
+
+    # Dockmon
+    dockmon:
+      rule: "Host(`workstation`)"
+      entryPoints:
+        - websecure
+      service: dockmon
+      tls:
+        certResolver: le
+
+    # Glance
+    glance:
+      rule: "Host(`glance.workstation`)"
+      entryPoints:
+        - websecure
+      service: glance
+      tls:
+        certResolver: le
+
+    # Watercrawl (edu_master)
+    watercrawl:
+      rule: "Host(`watercrawl.workstation`)"
+      entryPoints:
+        - websecure
+      service: watercrawl
+      tls:
+        certResolver: le
+
+    # N8N
+    n8n:
+      rule: "Host(`n8n.workstation`)"
+      entryPoints:
+        - websecure
+      service: n8n
+      tls:
+        certResolver: le
+
+  services:
+    # Portainer
+    portainer:
+      loadBalancer:
+        servers:
+          - url: "https://portainer:9443"
+
+    # AdGuard Home
+    adguard:
+      loadBalancer:
+        servers:
+          - url: "http://adguardhome:3000"
+
+    # Nextcloud AIO Interface
+    nextcloud-aio:
+      loadBalancer:
+        servers:
+          - url: "https://nextcloud-aio-mastercontainer:8080"
+
+    # Nextcloud Main
+    nextcloud:
+      loadBalancer:
+        servers:
+          - url: "https://nextcloud-aio-mastercontainer:8443"
+
+    # Dockmon
+    dockmon:
+      loadBalancer:
+        servers:
+          - url: "https://dockmon:443"
+
+    # Glance
+    glance:
+      loadBalancer:
+        servers:
+          - url: "http://glance:8080"
+
+    # Watercrawl
+    watercrawl:
+      loadBalancer:
+        servers:
+          - url: "http://nginx:80"
+
+    # N8N
+    n8n:
+      loadBalancer:
+        servers:
+          - url: "http://n8n:5678"
+
+  middlewares:
+    # HTTPS Redirect
+    redirect-https:
+      redirectScheme:
+        scheme: https
+        permanent: true
+
+    # Security Headers
+    security-headers:
+      headers:
+        browserXssFilter: true
+        contentTypeNosniff: true
+        forceSTSHeader: true
+        stsIncludeSubdomains: true
+        stsPreload: true
+        stsSeconds: 31536000
+        customFrameOptionsValue: "SAMEORIGIN"