This commit is contained in:
Michael Grote 2024-11-08 22:05:44 +01:00
parent c8dd0bd46e
commit 959da3c67d

View file

@ -23,22 +23,24 @@ services:
labels:
traefik.enable: true
# s3
traefik.http.routers.app2.service: s3
traefik.http.routers.minio-s3.service: minio-s3
traefik.http.routers.minio-s3.priority: "10"
traefik.http.routers.minio-s3.rule: Host(`s3.mgrote.net`)
traefik.http.routers.minio-s3.tls: true
traefik.http.routers.minio-s3.tls.certresolver: resolver_letsencrypt
traefik.http.routers.minio-s3.entrypoints: entry_https
traefik.http.services.minio-s3.loadbalancer.server.port: 9000
# WebUI
traefik.http.routers.app2.service: ui
traefik.http.routers.minio-ui.rule: Host(`s3.mgrote.net&&PathPrefix(`/ui`)`)
traefik.http.routers.minio-ui.tls: true
traefik.http.routers.minio-ui.tls.certresolver: resolver_letsencrypt
traefik.http.routers.minio-ui.entrypoints: entry_https
traefik.http.services.minio-ui.loadbalancer.server.port: 9001
traefik.http.routers.minio-ui.middlewares: minio-ui-ipallowlist
traefik.http.middlewares.minio-ui-ipallowlist.ipallowlist.sourcerange: 192.168.2.0/24,10.25.25.0/24
traefik.http.middlewares.minio-ui-ipallowlist.ipallowlist.ipstrategy.depth: 0 # https://doc.traefik.io/traefik/middlewares/http/ipallowlist/#ipstrategydepth
# traefik.http.routers.minio-ui.service: minio-ui
# traefik.http.routers.minio-ui.priority: "20"
# traefik.http.routers.minio-ui.rule: Host(`ui-s3.mgrote.net`)
# traefik.http.routers.minio-ui.tls: true
# traefik.http.routers.minio-ui.tls.certresolver: resolver_letsencrypt
# traefik.http.routers.minio-ui.entrypoints: entry_https
# traefik.http.services.minio-ui.loadbalancer.server.port: 9001
# traefik.http.routers.minio-ui.middlewares: minio-ui-ipallowlist # also entferne den Prefix danach wieder
# traefik.http.middlewares.minio-ui-ipallowlist.ipallowlist.sourcerange: 192.168.2.0/24,10.25.25.0/24
# traefik.http.middlewares.minio-ui-ipallowlist.ipallowlist.ipstrategy.depth: 0 # https://doc.traefik.io/traefik/middlewares/http/ipallowlist/#ipstrategydepth
######## Networks ########
networks:
@ -66,3 +68,4 @@ volumes:
# gui auch uber traefik mit szubnet beschrankung
# linter
# todo später automatisieren
# ui von außen testen