http:
  routers:
    gitea-block-stack-env:
      rule: 'Host(`gitea.sherlockhomeless.net`) && PathRegexp(`(?i)(^|/)stack[.]env$`)'
      priority: 1000
      entryPoints:
        - websecure
      tls:
        certResolver: letsencrypt
      middlewares:
        - gitea-deny-stack-env
      service: gitea

    gitea:
      rule: 'Host(`gitea.sherlockhomeless.net`)'
      entryPoints:
        - websecure
      tls:
        certResolver: letsencrypt
      middlewares:
        - crowdsec-bouncer@file
      service: gitea

  middlewares:
    gitea-deny-stack-env:
      ipAllowList:
        sourceRange:
          - 0.0.0.0/32
          - ::/128

  services:
    gitea:
      loadBalancer:
        servers:
          - url: http://gitea:3000