diff --git a/stack.production.yml b/stack.production.yml index bad182b..5c05170 100644 --- a/stack.production.yml +++ b/stack.production.yml @@ -61,30 +61,22 @@ services: - node.hostname == ingress.nixc.us # - node.labels.mac-rack == true labels: - # - "us.nixc.autodeploy=true" - # - 'traefik.enable=true' - # - 'traefik.http.routers.authelia_authelia.tls=true' - # - "traefik.http.services.authelia_authelia.loadbalancer.server.port=9091" - # - 'traefik.http.routers.authelia_authelia.rule=Host(`login.nixc.us`)' - # - 'traefik.http.routers.authelia_authelia.entrypoints=websecure' - # - "traefik.http.routers.authelia_authelia.tls.certresolver=letsencryptresolver" + - "us.nixc.autodeploy=true" + - 'traefik.enable=true' + - 'traefik.http.routers.authelia_authelia.tls=true' + - "traefik.http.services.authelia_authelia.loadbalancer.server.port=9091" + - 'traefik.http.routers.authelia_authelia.rule=Host(`login.nixc.us`)' + - 'traefik.http.routers.authelia_authelia.entrypoints=websecure' + - "traefik.http.routers.authelia_authelia.tls.certresolver=letsencryptresolver" # - "traefik.http.routers.authelia_authelia.service=authelia_authelia" - # - "traefik.docker.network=traefik" - # ## Authelia recommendations - # - 'traefik.http.middlewares.authelia_authelia.forwardauth.address=http://authelia_authelia:9091/api/verify?rd=https://login.nixc.us/' - # - 'traefik.http.middlewares.authelia_authelia.forwardauth.trustForwardHeader=true' - # - 'traefik.http.middlewares.authelia_authelia.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email' - # - 'traefik.http.middlewares.authelia-basic.forwardauth.address=http://authelia_authelia:9091/api/verify?auth=basic' - # - 'traefik.http.middlewares.authelia-basic.forwardauth.trustForwardHeader=true' - # - 'traefik.http.middlewares.authelia-basic.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email' - - "traefik.enable=true" - "traefik.docker.network=traefik" - - "traefik.http.services.authelia_authelia.loadbalancer.server.port=9091" - - "traefik.http.routers.authelia_authelia.entrypoints=websecure" - - "traefik.http.routers.authelia_authelia.rule=Host(`login.nixc.us`)" - - "traefik.http.routers.authelia_authelia.middlewares=securityHeaders@file" - - + # ## Authelia recommendations + - 'traefik.http.middlewares.authelia_authelia.forwardauth.address=http://authelia_authelia:9091/api/verify?rd=https://login.nixc.us/' + - 'traefik.http.middlewares.authelia_authelia.forwardauth.trustForwardHeader=true' + - 'traefik.http.middlewares.authelia_authelia.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email' + - 'traefik.http.middlewares.authelia-basic.forwardauth.address=http://authelia_authelia:9091/api/verify?auth=basic' + - 'traefik.http.middlewares.authelia-basic.forwardauth.trustForwardHeader=true' + - 'traefik.http.middlewares.authelia-basic.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email' redis: image: git.nixc.us/nixius/authelia:production-redis # command: redis-server --appendonly yes