Improve all route definitions with security headers and port names

main
trivernis 1 year ago
parent 5571bc6e51
commit 000c7ec80c
Signed by: Trivernis
GPG Key ID: DFFFCC2C7A02DB45

@ -9,9 +9,12 @@ spec:
routes: routes:
- match: Host(`git.trivernis.dev`) - match: Host(`git.trivernis.dev`)
kind: Rule kind: Rule
middlewares:
- name: strict-security-headers
namespace: default
services: services:
- name: forgejo-http - name: forgejo-http
port: 3000 port: http
--- ---
apiVersion: traefik.containo.us/v1alpha1 apiVersion: traefik.containo.us/v1alpha1
kind: IngressRouteTCP kind: IngressRouteTCP
@ -25,4 +28,4 @@ spec:
- match: HostSNI(`*`) - match: HostSNI(`*`)
services: services:
- name: forgejo-ssh - name: forgejo-ssh
port: 22 port: ssh

@ -18,8 +18,11 @@ spec:
routes: routes:
- match: Host(`longhorn.trivernis.net`) - match: Host(`longhorn.trivernis.net`)
kind: Rule kind: Rule
middlewares:
- name: strict-security-headers
namespace: default
services: services:
- name: longhorn-frontend - name: longhorn-frontend
port: 80 port: http
middlewares: middlewares:
- name: longhorn-auth - name: longhorn-auth

@ -9,6 +9,9 @@ spec:
routes: routes:
- match: Host(`grafana.trivernis.dev`) || Host(`grafana.trivernis.net`) - match: Host(`grafana.trivernis.dev`) || Host(`grafana.trivernis.net`)
kind: Rule kind: Rule
middlewares:
- name: strict-security-headers
namespace: default
services: services:
- name: prometheus-stack-grafana - name: prometheus-stack-grafana
port: 80 port: http-web

@ -7,8 +7,11 @@ spec:
entryPoints: entryPoints:
- web - web
routes: routes:
- match: Host(`miniflux.trivernis.dev`) || Host(`miniflux.trivernis.net`) - match: Host(`miniflux.trivernis.dev`, `miniflux.trivernis.net`)
kind: Rule kind: Rule
middlewares:
- name: strict-security-headers
namespace: default
services: services:
- name: miniflux - name: miniflux
port: 8080 port: http

@ -57,13 +57,11 @@ spec:
entryPoints: entryPoints:
- web - web
routes: routes:
- match: Host(`plantwiki.trivernis.dev`) - match: Host(`plantwiki.trivernis.dev, plantwiki.trivernis.net`)
kind: Rule kind: Rule
middlewares:
- name: strict-security-headers
namespace: default
services: services:
- name: plantwiki-srv - name: plantwiki-srv
port: 80 port: 80
- match: Host(`plantwiki.trivernis.net`)
kind: Rule
services:
- name: plantwiki-srv
port: 80

@ -7,7 +7,7 @@ spec:
entryPoints: entryPoints:
- web - web
routes: routes:
- match: Host(`search.trivernis.dev`) || Host(`search.trivernis.net`) - match: Host(`search.trivernis.dev`, `search.trivernis.net`)
kind: Rule kind: Rule
services: services:
- name: searxng-srv - name: searxng-srv

@ -16,15 +16,20 @@ spec:
entryPoints: entryPoints:
- web - web
routes: routes:
- match: Host(`status.cluster.trivernis.dev`) || Host(`status.cluster.trivernis.net`) - match: Host(`status.cluster.trivernis.dev`, `status.cluster.trivernis.net`)
kind: Rule kind: Rule
middlewares:
- name: strict-security-headers
namespace: default
services: services:
- name: uptime-kuma - name: uptime-kuma
port: 3001 port: http
- match: Host(`status.trivernis.dev`) || Host(`status.trivernis.net`) - match: Host(`status.trivernis.dev`, `status.trivernis.net`)
kind: Rule kind: Rule
middlewares: middlewares:
- name: strict-security-headers
namespace: default
- name: prefix-dashboard-services - name: prefix-dashboard-services
services: services:
- name: uptime-kuma - name: uptime-kuma
port: 3001 port: http

Loading…
Cancel
Save