From eeab9f7320e141bd4eaacbc08a1927996920e77d Mon Sep 17 00:00:00 2001 From: Jonas Thelemann Date: Sun, 11 May 2025 06:26:50 +0200 Subject: [PATCH] fix(traefik): specify router entrypoints --- src/development/stack.yml | 25 ++++++++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) diff --git a/src/development/stack.yml b/src/development/stack.yml index 9e8b8170..b5b6a5ae 100644 --- a/src/development/stack.yml +++ b/src/development/stack.yml @@ -99,8 +99,10 @@ services: deploy: labels: - traefik.enable=true + - traefik.http.routers.adminer.entryPoints=web - traefik.http.routers.adminer.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.adminer.rule=Host(`adminer.${STACK_DOMAIN}`) + - traefik.http.routers.adminer_secure.entryPoints=web-secure - traefik.http.routers.adminer_secure.rule=Host(`adminer.${STACK_DOMAIN}`) - traefik.http.routers.adminer_secure.tls.options=mintls13@file #DARGSTACK-REMOVE - traefik.http.services.adminer.loadbalancer.server.port=8080 @@ -148,8 +150,10 @@ services: deploy: labels: - traefik.enable=true + - traefik.http.routers.grafana.entryPoints=web - traefik.http.routers.grafana.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.grafana.rule=Host(`grafana.${STACK_DOMAIN}`) + - traefik.http.routers.grafana_secure.entryPoints=web-secure - traefik.http.routers.grafana_secure.rule=Host(`grafana.${STACK_DOMAIN}`) - traefik.http.routers.grafana_secure.tls.options=mintls13@file #DARGSTACK-REMOVE - traefik.http.services.grafana.loadbalancer.server.port=3000 @@ -189,18 +193,22 @@ services: labels: #DARGSTACK-REMOVE - traefik.enable=true #DARGSTACK-REMOVE # Minio Console + - traefik.http.routers.minio.entryPoints=web #DARGSTACK-REMOVE - traefik.http.routers.minio.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.minio.rule=Host(`minio.${STACK_DOMAIN}`) #DARGSTACK-REMOVE - traefik.http.routers.minio.service=minio #DARGSTACK-REMOVE + - traefik.http.routers.minio_secure.entryPoints=web-secure #DARGSTACK-REMOVE - traefik.http.routers.minio_secure.rule=Host(`minio.${STACK_DOMAIN}`) #DARGSTACK-REMOVE - traefik.http.routers.minio_secure.tls.options=mintls13@file #DARGSTACK-REMOVE - traefik.http.routers.minio_secure.service=minio #DARGSTACK-REMOVE - traefik.http.services.minio.loadbalancer.server.port=9001 #DARGSTACK-REMOVE - traefik.http.services.minio.loadbalancer.passhostheader=true #DARGSTACK-REMOVE # Minio itself + - traefik.http.routers.s3.entryPoints=web #DARGSTACK-REMOVE - traefik.http.routers.s3.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.s3.rule=Host(`s3.${STACK_DOMAIN}`) #DARGSTACK-REMOVE - traefik.http.routers.s3.service=s3 #DARGSTACK-REMOVE + - traefik.http.routers.s3_secure.entryPoints=web-secure #DARGSTACK-REMOVE - traefik.http.routers.s3_secure.rule=Host(`s3.${STACK_DOMAIN}`) #DARGSTACK-REMOVE - traefik.http.routers.s3_secure.tls.options=mintls13@file #DARGSTACK-REMOVE - traefik.http.routers.s3_secure.service=s3 #DARGSTACK-REMOVE @@ -219,8 +227,10 @@ services: deploy: labels: - traefik.enable=true + - traefik.http.routers.portainer.entryPoints=web - traefik.http.routers.portainer.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.portainer.rule=Host(`portainer.${STACK_DOMAIN}`) + - traefik.http.routers.portainer_secure.entryPoints=web-secure - traefik.http.routers.portainer_secure.rule=Host(`portainer.${STACK_DOMAIN}`) - traefik.http.routers.portainer_secure.tls.options=mintls13@file #DARGSTACK-REMOVE - traefik.http.services.portainer.loadbalancer.server.port=9000 @@ -254,11 +264,14 @@ services: - traefik.http.middlewares.postgraphile_auth.forwardauth.forwardBody=true - traefik.http.middlewares.postgraphile_cors.headers.accessControlAllowHeaders=authorization,baggage,content-type,sentry-trace,x-turnstile-key - traefik.http.middlewares.postgraphile_cors.headers.accessControlAllowOriginList=* + - traefik.http.routers.postgraphile.entryPoints=web - traefik.http.routers.postgraphile.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.postgraphile.rule=Host(`postgraphile.${STACK_DOMAIN}`) + - traefik.http.routers.postgraphile_secure.entryPoints=web-secure - traefik.http.routers.postgraphile_secure.middlewares=postgraphile_auth,postgraphile_cors - traefik.http.routers.postgraphile_secure.rule=Host(`postgraphile.${STACK_DOMAIN}`) - traefik.http.routers.postgraphile_secure.tls.options=mintls13@file #DARGSTACK-REMOVE + - traefik.http.routers.postgraphile_secure_graphiql.entryPoints=web-secure - traefik.http.routers.postgraphile_secure_graphiql.rule=Host(`postgraphile.${STACK_DOMAIN}`) && Path(`/graphiql`) - traefik.http.routers.postgraphile_secure_graphiql.tls.options=mintls13@file #DARGSTACK-REMOVE - traefik.http.services.postgraphile.loadbalancer.server.port=5000 @@ -305,8 +318,10 @@ services: deploy: labels: - traefik.enable=true + - traefik.http.routers.prometheus.entryPoints=web - traefik.http.routers.prometheus.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.prometheus.rule=Host(`prometheus.${STACK_DOMAIN}`) + - traefik.http.routers.prometheus_secure.entryPoints=web-secure - traefik.http.routers.prometheus_secure.rule=Host(`prometheus.${STACK_DOMAIN}`) - traefik.http.routers.prometheus_secure.tls.options=mintls13@file #DARGSTACK-REMOVE - traefik.http.services.prometheus.loadbalancer.server.port=9090 @@ -319,9 +334,11 @@ services: deploy: labels: - traefik.enable=true + - traefik.http.routers.reccoom.entryPoints=web - traefik.http.routers.reccoom.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.reccoom.rule=Host(`reccoom.${STACK_DOMAIN}`) - traefik.http.routers.reccoom_secure.rule=Host(`reccoom.${STACK_DOMAIN}`) + - traefik.http.routers.reccoom_secure.entryPoints=web-secure - traefik.http.routers.reccoom_secure.tls.options=mintls13@file #DARGSTACK-REMOVE - traefik.http.services.reccoom.loadbalancer.server.port=8001 image: maevsi/reccoom:dev @@ -355,8 +372,10 @@ services: deploy: labels: - traefik.enable=true + - traefik.http.routers.redpanda.entryPoints=web - traefik.http.routers.redpanda.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.redpanda.rule=Host(`redpanda.${STACK_DOMAIN}`) + - traefik.http.routers.redpanda_secure.entryPoints=web-secure - traefik.http.routers.redpanda_secure.rule=Host(`redpanda.${STACK_DOMAIN}`) - traefik.http.routers.redpanda_secure.tls.options=mintls13@file #DARGSTACK-REMOVE - traefik.http.services.redpanda.loadbalancer.server.port=8080 @@ -392,9 +411,11 @@ services: labels: - traefik.enable=true - traefik.http.middlewares.redirectscheme.redirectscheme.scheme=https #DARGSTACK-REMOVE + - traefik.http.routers.traefik.entryPoints=web - traefik.http.routers.traefik.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.traefik.rule=Host(`traefik.${STACK_DOMAIN}`) - traefik.http.routers.traefik.service=api@internal + - traefik.http.routers.traefik_secure.entryPoints=web-secure - traefik.http.routers.traefik_secure.rule=Host(`traefik.${STACK_DOMAIN}`) - traefik.http.routers.traefik_secure.service=api@internal - traefik.http.routers.traefik_secure.tls.options=mintls13@file #DARGSTACK-REMOVE @@ -423,9 +444,11 @@ services: deploy: labels: - traefik.enable=true + - traefik.http.middlewares.tusd_cors.headers.customresponseheaders.Cross-Origin-Resource-Policy=cross-origin + - traefik.http.routers.tusd.entryPoints=web - traefik.http.routers.tusd.middlewares=redirectscheme #DARGSTACK-REMOVE - traefik.http.routers.tusd.rule=Host(`tusd.${STACK_DOMAIN}`) - - traefik.http.middlewares.tusd_cors.headers.customresponseheaders.Cross-Origin-Resource-Policy=cross-origin + - traefik.http.routers.tusd_secure.entryPoints=web-secure - traefik.http.routers.tusd_secure.middlewares=tusd_cors - traefik.http.routers.tusd_secure.rule=Host(`tusd.${STACK_DOMAIN}`) && (Method(`GET`) || Method(`HEAD`) || Method(`OPTIONS`) || Method(`POST`) || Method(`PUT`) || Method(`PATCH`)) - traefik.http.routers.tusd_secure.tls.options=mintls13@file #DARGSTACK-REMOVE