Move traefik into its own role

2020-04-23 20:49:43 +01:00
parent 9962d9103f
commit 89ba23719c
9 changed files with 14 additions and 23 deletions
--- a/ansible/roles/traefik/files/file-provider.yml
+++ b/ansible/roles/traefik/files/file-provider.yml
@ -0,0 +1,43 @@
+http:
+  middlewares:
+    internal-only:
+      ipWhiteList:
+        sourceRange:
+          - "10.0.0.0/8"
+          - "172.16.0.0/12"
+          - "192.168.0.0/16"
+    hsts:
+      redirectScheme:
+        scheme: https
+
+  routers:
+    hsts:
+      service: ping@internal
+      rule: PathPrefix(`/`)
+      entryPoints:
+        - web
+      middlewares:
+        - hsts
+    ping:
+      service: ping@internal
+      rule: Host(`traefik.jakehoward.tech`) && Path(`/ping/`)
+      middlewares:
+        - hsts
+      tls:
+        certResolver: le
+    dashboard:
+      service: dashboard@internal
+      rule: Host(`traefik.jakehoward.tech`)
+      middlewares:
+        - hsts
+        - internal-only
+      tls:
+        certResolver: le
+    api:
+      service: api@internal
+      rule: Host(`traefik.jakehoward.tech`) && PathPrefix(`/api`)
+      middlewares:
+        - hsts
+        - internal-only
+      tls:
+        certResolver: le