refactor: move traefik configuration to docker-compose files via labels

2025-12-05 04:03:24 +01:00
parent d776124f26
commit fc6a11397b
17 changed files with 356 additions and 74 deletions
@@ -0,0 +1,153 @@
+http:
+  routers:
+    # Traefik Dashboard (dev access. local only)
+    traefik-dashboard-dev:
+      rule: "Host(`traefik.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: api@internal
+      middlewares:
+        # - auth
+        - security-headers
+      tls: {}
+
+    # Nextcloud AIO Interface (dev access. local only)
+    nextcloud-aio-dev:
+      rule: "Host(`nextcloud-aio.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: nextcloud-aio
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Termix (dev access, (account required))
+    termix-dev:
+      rule: "Host(`termix.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: termix
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # MeTube (dev access, (auth required))
+    metube-dev:
+      rule: "Host(`metube.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: metube
+      middlewares:
+        - metube-auth
+        - security-headers
+      tls: {}
+
+    # Portainer (dev acess, (account required))
+    portainer-dev:
+      rule: "Host(`portainer.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: portainer
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Uptime Kuma (dev access, (account required))
+    uptime-kuma-dev:
+      rule: "Host(`uptime.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: uptime-kuma
+      tls: {}
+
+    # AdGuard Home (dev access, (account required))
+    adguard-dev:
+      rule: "Host(`adguard.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: adguard
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Nextcloud Main (public (account required))
+    nextcloud-dev:
+      rule: "Host(`nextcloud.gigaforust`)"
+      entrypoints:
+        - websecure
+      service: nextcloud
+      middlewares:
+        - nextcloud-chain
+      tls: {}
+
+    # Dockmon (dev access (account required))
+    dockmon-dev:
+      rule: "Host(`dockmon.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: dockmon
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Gitea (dev access (account required))
+    gitea-dev:
+      rule: "Host(`gitea.gigaforust`)"
+      entryPoints:
+        - websecure
+        - ssh
+      service: gitea
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Glance (dev access, local only)
+    glance-dev:
+      rule: "Host(`glance.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: glance
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Watercrawl (dev access, local only)
+    watercrawl-dev:
+      rule: "Host(`watercrawl.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: watercrawl
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # N8N (local only)
+    n8n-dev:
+      rule: "Host(`n8n.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: n8n
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Landing Page (public)
+    forust-homepage-dev:
+      rule: "Host(`landing.gigaforust`)"
+      entryPoints:
+        - websecure
+      service: forust-homepage
+      middlewares:
+        - security-headers
+      tls: {}
+
+    # Penpot
+    penpot-dev:
+      rule: "Host(`penpot.gigaforust`)"
+      entryPoints:
+        - websecure
+        - web
+      service: penpot
+      middlewares:
+        - security-headers
+      tls: {}