79 lines
2.6 KiB
YAML
79 lines
2.6 KiB
YAML
http:
|
|
middlewares:
|
|
<%- if security_headers_enabled %>
|
|
security-headers:
|
|
headers:
|
|
contentTypeNosniff: true
|
|
frameDeny: true
|
|
browserXssFilter: true
|
|
referrerPolicy: same-origin
|
|
stsSeconds: 31536000
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
customResponseHeaders:
|
|
X-Robots-Tag: none
|
|
<%- endif %>
|
|
<%- if dashboard_basicauth_enabled %>
|
|
dashboard-basicauth:
|
|
basicAuth:
|
|
users:
|
|
- << dashboard_basicauth_users >>
|
|
<%- endif %>
|
|
<%- if ipallowlist_enabled %>
|
|
dashboard-ipallowlist:
|
|
ipAllowList:
|
|
sourceRange:
|
|
- << ipallowlist_range_1 >>
|
|
<%- if ipallowlist_range_2 %>
|
|
- << ipallowlist_range_2 >>
|
|
<%- endif %>
|
|
<%- if ipallowlist_range_3 %>
|
|
- << ipallowlist_range_3 >>
|
|
<%- endif %>
|
|
default-ipallowlist:
|
|
ipAllowList:
|
|
sourceRange:
|
|
- << ipallowlist_range_1 >>
|
|
<%- if ipallowlist_range_2 %>
|
|
- << ipallowlist_range_2 >>
|
|
<%- endif %>
|
|
<%- if ipallowlist_range_3 %>
|
|
- << ipallowlist_range_3 >>
|
|
<%- endif %>
|
|
<%- endif %>
|
|
<%- if forwardauth_enabled %>
|
|
forward-auth:
|
|
forwardAuth:
|
|
address: "<< forwardauth_address >>"
|
|
trustForwardHeader: << forwardauth_trust_forward_header | lower >>
|
|
authResponseHeadersRegex: "<< forwardauth_response_headers_regex >>"
|
|
<%- endif %>
|
|
<%- if crowdsec_middleware_enabled %>
|
|
crowdsec-bouncer:
|
|
plugin:
|
|
crowdsec-bouncer-traefik-plugin:
|
|
enabled: true
|
|
crowdsecMode: << crowdsec_mode >>
|
|
crowdsecLapiScheme: http
|
|
crowdsecLapiHost: << crowdsec_lapi_host >>
|
|
crowdsecLapiKey: << crowdsec_bouncer_key >>
|
|
<%- if crowdsec_trusted_ip_1 or crowdsec_trusted_ip_2 or crowdsec_trusted_ip_3 %>
|
|
forwardedHeadersTrustedIPs:
|
|
<%- if crowdsec_trusted_ip_1 %>
|
|
- << crowdsec_trusted_ip_1 >>
|
|
<%- endif %>
|
|
<%- if crowdsec_trusted_ip_2 %>
|
|
- << crowdsec_trusted_ip_2 >>
|
|
<%- endif %>
|
|
<%- if crowdsec_trusted_ip_3 %>
|
|
- << crowdsec_trusted_ip_3 >>
|
|
<%- endif %>
|
|
<%- endif %>
|
|
crowdsecAppsecEnabled: << crowdsec_appsec_enabled | lower >>
|
|
<%- if crowdsec_appsec_enabled %>
|
|
crowdsecAppsecHost: << crowdsec_appsec_host >>
|
|
crowdsecAppsecFailureBlock: << crowdsec_appsec_failure_block | lower >>
|
|
crowdsecAppsecUnreachableBlock: << crowdsec_appsec_unreachable_block | lower >>
|
|
<%- endif %>
|
|
<%- endif %>
|