first commit

config.yml

@@ -1,24 +1,26 @@
 http:
   routers:
     # Router for Gogs (if it's running outside Docker or on different network)
-    gogs:
+    # Disabled - now using Gitea with Docker labels
-      rule: "Host(`git.pkartchner.com`)"
+    # gogs:
-      entryPoints:
+    #   rule: "Host(`git.pkartchner.com`)"
-        - https
+    #   entryPoints:
-      service: gogs
+    #     - https
-      middlewares:
+    #   service: gogs
-        - geoblock
+    #   middlewares:
-        - secure-headers
+    #     - geoblock
-        - crowdsec-bouncer
+    #     - secure-headers
-      tls:
+    #     - crowdsec-bouncer
-        certResolver: letsencrypt
+    #   tls:
+    #     certResolver: letsencrypt
 
   services:
     # Service for Gogs
-    gogs:
+    # Disabled - now using Gitea with Docker labels
-      loadBalancer:
+    # gogs:
-        servers:
+    #   loadBalancer:
-          - url: "http://gogs.pkartchner.com:3000"
+    #     servers:
+    #       - url: "http://gogs.pkartchner.com:3000"
 
   middlewares:
     # Security headers
@@ -59,8 +61,8 @@ http:
           silentStartUp: false
           allowLocalRequests: true
           logLocalRequests: false
-          logAllowedRequests: false
+          logAllowedRequests: true
-          logApiRequests: false
+          logApiRequests: true
           api: https://get.geojs.io/v1/ip/country/{ip}
           apiTimeoutMs: 750
           cacheSize: 25
@@ -69,3 +71,10 @@ http:
           unknownCountryApiResponse: nil
           countries:
             - US
+
+    # Rate limiting for Harbor - Prevent brute force attacks
+    harbor-ratelimit:
+      rateLimit:
+        average: 100
+        burst: 50
+        period: 1m

docker-compose.yml

@@ -1,5 +1,3 @@
-version: '3.8'
-
 services:
   traefik:
     image: traefik:v2.10