Files
server/stacks/traefik/dynamic/middlewares.yml

37 lines
1021 B
YAML

http:
middlewares:
local-only:
ipWhiteList:
sourceRange:
- "192.168.0.0/16"
redirect-to-https:
redirectScheme:
scheme: https
permanent: true
pihole-rewrite:
replacePathRegex:
regex: ^/$
replacement: /admin/
crowdsec:
plugin:
bouncer:
enabled: true
defaultDecisionSeconds: 60
crowdsecMode: live
crowdsecAppsecEnabled: true
crowdsecAppsecHost: crowdsec:7422
crowdsecAppsecFailureBlock: true
crowdsecAppsecUnreachableBlock: true
crowdsecLapiKey: mvBM8BzhJ1/P8Lcb72gsIn5JNgQCzwsRSKNuBJqJ/0Q
crowdsecLapiHost: crowdsec:8080
crowdsecLapiScheme: http
crowdsecLapiTLSInsecureVerify: false
forwardedHeadersTrustedIPs:
- 10.0.0.0/8
- 172.16.0.0/12
- 192.168.0.0/16
clientTrustedIPs:
- 10.0.0.0/8
- 172.16.0.0/12
- 192.168.0.0/16