2022-08-25 22:22:11 +02:00
|
|
|
# TCP da SSH keine Hostnamen kennt
|
|
|
|
|
http:
|
|
|
|
|
###### router #####
|
|
|
|
|
routers:
|
2024-11-10 17:30:54 +01:00
|
|
|
router_forgejo:
|
2022-08-25 22:22:11 +02:00
|
|
|
rule: "Host(`git.mgrote.net`)"
|
2024-11-10 17:30:54 +01:00
|
|
|
service: "service_forgejo"
|
2024-09-12 10:28:47 +02:00
|
|
|
middlewares:
|
2024-11-10 18:07:12 +01:00
|
|
|
- "ratelimit40@file"
|
2022-08-25 22:22:11 +02:00
|
|
|
entrypoints:
|
|
|
|
|
- entry_https
|
|
|
|
|
tls:
|
|
|
|
|
certresolver: resolver_letsencrypt
|
|
|
|
|
###### services #####
|
|
|
|
|
services:
|
2024-11-10 17:30:54 +01:00
|
|
|
service_forgejo:
|
2022-08-25 22:22:11 +02:00
|
|
|
loadBalancer:
|
|
|
|
|
servers:
|
2024-04-04 09:48:09 +02:00
|
|
|
- url: "http://forgejo.mgrote.net:3000/"
|
2024-09-12 10:28:47 +02:00
|
|
|
###### middlewares #####
|
|
|
|
|
middlewares:
|
2024-11-10 18:07:12 +01:00
|
|
|
ratelimit40:
|
2024-09-12 10:28:47 +02:00
|
|
|
rateLimit:
|
2024-10-04 14:50:10 +02:00
|
|
|
average: 40
|
|
|
|
|
burst: 80
|
2024-09-12 10:28:47 +02:00
|
|
|
sourceCriterion:
|
|
|
|
|
ipStrategy:
|
|
|
|
|
depth: 2
|
2024-11-10 18:07:12 +01:00
|
|
|
allowlist_localnet:
|
|
|
|
|
ipallowlist:
|
|
|
|
|
sourcerange:
|
|
|
|
|
- 192.168.2.0/24
|
|
|
|
|
- 10.25.25.0/24
|
|
|
|
|
- 192.168.48.0/24 # docker
|
2024-11-10 19:45:26 +01:00
|
|
|
- 172.18.0.0/16 # gitea-act-runner
|
2024-11-10 18:07:12 +01:00
|
|
|
ipstrategy:
|
|
|
|
|
depth: 0 # https://doc.traefik.io/traefik/middlewares/http/ipallowlist/#ipstrategydepth
|
