gwg313/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

updating traefik and others

Browse source
This commit is contained in:
gwg313 2025-04-03 01:49:35 -04:00
parent 649f32545a
commit 1b8687a703
Signed by: gwg313
GPG key ID: 60FF63B4826B7400
16 changed files with 252 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

15
hosts/seikan/traefik.nix
View file

@ -13,6 +13,12 @@
group = config.users.users.traefik.group;
};
sops.secrets.basic-auth = {
mode = "0440";
owner = config.users.users.traefik.name;
group = config.users.users.traefik.group;
};
systemd.services.traefik.environment = {
CF_DNS_API_TOKEN_FILE = "${config.sops.secrets.cf-api-token.path}";
};
@ -69,10 +75,10 @@
http = {
routers = {
dashboard = {
rule = "Host(`monitor.local.gwg313.xyz`)";
rule = "Host(`monitor.gwg313.xyz`)";
service = "api@internal";
middlewares = [
# "auth"
"auth"
"headers"
];
entrypoints = [ "websecure" ];
@ -82,6 +88,11 @@
};
};
middlewares = {
auth = {
basicAuth = {
usersFile = "${config.sops.secrets.basic-auth.path}";
};
};
headers = {
headers = {
browserxssfilter = true;