Paul R Kartchner
bd1dc1abed
Configure Traefik v2.10 with: - Automatic HTTPS using Let's Encrypt - HTTP to HTTPS redirect - Docker service discovery - Security headers middleware - Dashboard with basic auth Configured services: - Mealie (recipes.pkartchner.com) - Gogs (git.pkartchner.com) - Traefik Dashboard (traefik.pkartchner.com) Features: - Automatic SSL certificate management - Force HTTPS on all services - Security headers (HSTS, frame options, XSS protection) - Docker network isolation Next steps: Configure DNS records and port forwarding (see SETUP-INSTRUCTIONS.md) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
31 lines
721 B
YAML
31 lines
721 B
YAML
http:
|
|
routers:
|
|
# Router for Gogs (if it's running outside Docker or on different network)
|
|
gogs:
|
|
rule: "Host(`git.pkartchner.com`)"
|
|
entryPoints:
|
|
- https
|
|
service: gogs
|
|
tls:
|
|
certResolver: letsencrypt
|
|
|
|
services:
|
|
# Service for Gogs
|
|
gogs:
|
|
loadBalancer:
|
|
servers:
|
|
- url: "http://gogs.pkartchner.com:3000"
|
|
|
|
middlewares:
|
|
# Security headers
|
|
secure-headers:
|
|
headers:
|
|
forceSTSHeader: true
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
stsSeconds: 31536000
|
|
customFrameOptionsValue: "SAMEORIGIN"
|
|
contentTypeNosniff: true
|
|
browserXssFilter: true
|
|
referrerPolicy: "same-origin"
|