refactor(compose): protect services and centralize routing

This commit is contained in:
Eduardo David Paredes Vara
2026-07-25 11:21:08 +00:00
parent 29988f3149
commit 4536b3a36a
24 changed files with 159 additions and 104 deletions
+1 -15
View File
@@ -11,28 +11,14 @@ services:
networks:
- proxy
labels:
prune.protect: "true"
traefik.enable: "true"
traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"
# Router publico — permite abrir enlaces compartidos sin login.
traefik.http.routers.pbin-public.rule: "Host(`${PRIVATEBIN_DOMAIN}`) && (Method(`GET`) || Method(`HEAD`))"
traefik.http.routers.pbin-public.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
traefik.http.routers.pbin-public.tls: "true"
traefik.http.routers.pbin-public.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
traefik.http.routers.pbin-public.middlewares: "crowdsec-bouncer@file"
traefik.http.routers.pbin-public.service: "pbin-svc"
traefik.http.routers.pbin-public.priority: "20"
# Router protegido — crear/borrar requiere login.
traefik.http.routers.pbin.rule: "Host(`${PRIVATEBIN_DOMAIN}`)"
traefik.http.routers.pbin.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
traefik.http.routers.pbin.tls: "true"
traefik.http.routers.pbin.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
traefik.http.routers.pbin.middlewares: "crowdsec-bouncer@file,${TRAEFIK_AUTH_MIDDLEWARE}"
traefik.http.routers.pbin.service: "pbin-svc"
traefik.http.routers.pbin.priority: "10"
traefik.http.services.pbin-svc.loadbalancer.server.port: "8080"
homepage.group: "Automatizacion y desarrollo"
homepage.name: "PrivateBin"