Jake Howard
48934ad2c5
Apply gzip to everything
...
The middleware is smart enough to only apply it when needed, and only when it's not already compressed, so it's fine.
2021-09-19 22:48:48 +01:00
Jake Howard
33fcf1a9e5
Fix matrix federation
...
Apparently this has been broken since like March...
It seems communication over port 8448 is required for server-to-server
comms, even if the client doesn't use it.
2021-06-12 17:32:47 +01:00
Jake Howard
03affd269f
FLoC Block
...
https://paramdeo.com/blog/opting-your-website-out-of-googles-floc-network
2021-04-18 22:30:26 +01:00
Jake Howard
22d43c16a7
Correctly redirect http traffic to https
...
Bug caused by https://github.com/traefik/traefik/issues/8035
2021-04-06 11:56:05 +01:00
Jake Howard
6973fb536f
Add fail2ban for traefik
...
Remote action coming soon
2021-03-28 13:05:38 +01:00
Jake Howard
8398a2df21
Use endpoint middleware rather than hacky router
2021-03-27 23:34:34 +00:00
Jake Howard
116e1adb50
Disable Traefik pilot on dashboard
2021-03-24 23:14:01 +00:00
Jake Howard
b264e5cbcc
Monitor traefik with prometheus rather than influxdb
2021-03-04 16:37:53 +00:00
Jake Howard
ec0c78e6d9
Read emails from secrets
2021-02-14 12:29:14 +00:00
Jake Howard
058290b321
Keep track of IPs for PVE hosts
...
Yea they're all random, I'll deal with that later
2021-01-31 12:46:43 +00:00
Jake Howard
0f9802a46c
Install duplicati on PVE docker machine
...
Requires some changes to how private IPs are specified, which I really need to clean up at some point!
2021-01-20 21:38:01 +00:00
Jake Howard
604202fdce
Add traefik pages
...
Add it ready for the migration in future
2021-01-16 23:29:55 +00:00
Jake Howard
fef7f2c2b4
Move docker containers to new PVE container
2021-01-09 18:02:17 +00:00
Jake Howard
bdfd38c9fe
Allow traefik to run on non-wireguard host
2020-12-28 15:55:45 +00:00
Jake Howard
b11dbfc829
Move traefik file provider to use directory rather than single file
...
This makes future composition possible
2020-12-22 15:53:03 +00:00
Jake Howard
5079599b9d
Require TLS 1.2
2020-09-27 12:36:49 +01:00
Jake Howard
ea54d1be69
Expose pages sites
2020-09-05 20:33:57 +01:00
Jake Howard
e9aeed26ee
Use cloudflare DNS challenge for Traefik
2020-09-05 18:27:04 +01:00
Jake Howard
ec751ffa1a
Add influxdb to monitor traefik
2020-08-30 15:58:03 +01:00
Jake Howard
3c49c80ff1
Ensure traefik only listens on wireguard network
2020-07-12 19:29:18 +01:00
Jake Howard
f878866f10
Update yamllint
2020-06-18 20:49:12 +01:00
Jake Howard
7dd31c0556
Allow nextcloud to be reached over internal SSL
...
This removes the need for a custom config, and means traefik is proxying HTTP2, which is nice
2020-05-24 19:21:17 +01:00
Jake Howard
3e523bd04b
Remove traefik subdomain
2020-04-25 12:15:28 +01:00
Jake Howard
89ba23719c
Move traefik into its own role
2020-04-23 20:49:43 +01:00
