refactor(compose): protect services and centralize routing
This commit is contained in:
@@ -11,28 +11,14 @@ services:
|
||||
networks:
|
||||
- proxy
|
||||
labels:
|
||||
prune.protect: "true"
|
||||
traefik.enable: "true"
|
||||
traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"
|
||||
|
||||
# Router publico — permite abrir enlaces compartidos sin login.
|
||||
traefik.http.routers.pbin-public.rule: "Host(`${PRIVATEBIN_DOMAIN}`) && (Method(`GET`) || Method(`HEAD`))"
|
||||
traefik.http.routers.pbin-public.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
|
||||
traefik.http.routers.pbin-public.tls: "true"
|
||||
traefik.http.routers.pbin-public.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
|
||||
traefik.http.routers.pbin-public.middlewares: "crowdsec-bouncer@file"
|
||||
traefik.http.routers.pbin-public.service: "pbin-svc"
|
||||
traefik.http.routers.pbin-public.priority: "20"
|
||||
|
||||
# Router protegido — crear/borrar requiere login.
|
||||
traefik.http.routers.pbin.rule: "Host(`${PRIVATEBIN_DOMAIN}`)"
|
||||
traefik.http.routers.pbin.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
|
||||
traefik.http.routers.pbin.tls: "true"
|
||||
traefik.http.routers.pbin.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
|
||||
traefik.http.routers.pbin.middlewares: "crowdsec-bouncer@file,${TRAEFIK_AUTH_MIDDLEWARE}"
|
||||
traefik.http.routers.pbin.service: "pbin-svc"
|
||||
traefik.http.routers.pbin.priority: "10"
|
||||
|
||||
traefik.http.services.pbin-svc.loadbalancer.server.port: "8080"
|
||||
|
||||
homepage.group: "Automatizacion y desarrollo"
|
||||
homepage.name: "PrivateBin"
|
||||
|
||||
Reference in New Issue
Block a user