diff --git a/custom/lan-only.yml b/custom/lan-only.yml new file mode 100644 index 0000000..c87cf4e --- /dev/null +++ b/custom/lan-only.yml @@ -0,0 +1,7 @@ +http: + middlewares: + lan-only: + ipAllowList: + sourceRange: + - "192.168.1.1/24" + - "127.0.0.1/24" diff --git a/custom/omv_conf.yml b/custom/omv_conf.yml new file mode 100644 index 0000000..aee052f --- /dev/null +++ b/custom/omv_conf.yml @@ -0,0 +1,15 @@ +http: + # Router for Open Media Vault + routers: + omv: + entryPoints: + - web + service: omv + rule: Host(`omv.nearfuture`) + + # Add the service for OMV + services: + omv: + loadBalancer: + servers: + - url: http://avaritia:80 diff --git a/custom/tls.yml b/custom/tls.yml index b72534d..d13cbf8 100644 --- a/custom/tls.yml +++ b/custom/tls.yml @@ -2,3 +2,13 @@ tls: certificates: - certFile: /ssl/overseerr.nearfuture.crt keyFile: /ssl/overseerr.nearfuture.key + - certFile: /ssl/privatebin.nearfuture.crt + keyFile: /ssl/privatebin.nearfuture.key + - certFile: /ssl/privatebin.nearfuture.industries.crt + keyFile: /ssl/privatebin.nearfuture.industries.key + - certFile: /ssl/revolt.nearfuture.crt + keyFile: /ssl/revolt.nearfuture.key + #- certFile: /ssl/matrix.nearfuture.industries.crt + #keyFile: /ssl/matrix.nearfuture.industries.key + #- certFile: /ssl/synapse.nearfuture.industries.crt + #keyFile: /ssl/synapse.nearfuture.industries.key diff --git a/traefik.yml b/traefik.yml index 20a21be..8327d4c 100644 --- a/traefik.yml +++ b/traefik.yml @@ -37,13 +37,13 @@ entryPoints: # # Optional # -#log: +log: # Log level # # Optional # Default: "ERROR" # -# level: DEBUG + # level: DEBUG # Sets the filepath for the traefik log. If not specified, stdout will be used. # Intermediate directories are created if necessary. @@ -154,3 +154,19 @@ providers: file: directory: /etc/traefik/custom watch: true + +certificatesResolvers: + myresolver: + acme: + email: "jeff@nearfuture.industries" + storage: "acme.json" + caServer: https://acme-v02.api.letsencrypt.org/directory + #caServer: https://acme-staging-v02.api.letsencrypt.org/directory + dnsChallenge: + provider: "namecheap" + delayBeforeCheck: 60 + disablePropagationCheck: true + resolvers: + - "192.168.1.201:53" + #- "1.1.1.1:53" + #- "8.8.8.8:53"