Add the basics of some edge caching

2024-02-21 21:42:16 +00:00
parent b513c88774
commit 808e72553b
10 changed files with 72 additions and 14 deletions
--- a/ansible/roles/traefik/files/traefik.yml
+++ b/ansible/roles/traefik/files/traefik.yml
@ -31,10 +31,10 @@ entryPoints:
          {% endif %}
    proxyProtocol:
      trustedIPs:
-        - "{{ wireguard.cidr }}"
-        - "{{ pve_hosts.internal_cidr }}"
-        - "{{ nebula.cidr }}"
-        - "{{ tailscale_cidr }}"
+        - "{{ pve_hosts.ingress.ip }}/32"
+    forwardedHeaders:
+      trustedIPs:
+        - "{{ wireguard.server.ip }}/32"  # This is obtained from the connecting `proxy_protocol`
  traefik:
    address: :8080