794edf884d
Some checks failed
CI / lint (push) Successful in 32s
Deploy / notebooks (push) Has been skipped
Deploy / zotero (push) Has been skipped
Deploy / docs (push) Has been skipped
Deploy / api (push) Has been skipped
Deploy / mc (push) Has been skipped
Package Supply Chain / pkg-supply-chain (push) Failing after 58s
Deploy / report (push) Successful in 15s
CI / test (push) Successful in 13m9s
Real visitor IPs were lost behind the cloudflared tunnel: traefik saw the cloudflared container's docker IP as the client and ignored its X-Forwarded-For. Trust RFC1918 on web + websecure so XFF from the docker bridges (and the LAN) is honored. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
52 lines
870 B
YAML
52 lines
870 B
YAML
# Traefik Static Configuration
|
|
api:
|
|
dashboard: true
|
|
insecure: true
|
|
|
|
# Enable Prometheus metrics
|
|
metrics:
|
|
prometheus:
|
|
addEntryPointsLabels: true
|
|
addRoutersLabels: true
|
|
addServicesLabels: true
|
|
|
|
entryPoints:
|
|
web:
|
|
address: ":80"
|
|
forwardedHeaders:
|
|
trustedIPs:
|
|
- "10.0.0.0/8"
|
|
- "172.16.0.0/12"
|
|
- "192.168.0.0/16"
|
|
websecure:
|
|
address: ":443"
|
|
forwardedHeaders:
|
|
trustedIPs:
|
|
- "10.0.0.0/8"
|
|
- "172.16.0.0/12"
|
|
- "192.168.0.0/16"
|
|
dns:
|
|
address: ":53/udp"
|
|
|
|
providers:
|
|
file:
|
|
directory: /etc/traefik/dynamic
|
|
watch: true
|
|
|
|
log:
|
|
level: INFO
|
|
|
|
accessLog: {}
|
|
|
|
experimental:
|
|
localPlugins:
|
|
rewrite-body:
|
|
moduleName: "github.com/packruler/rewrite-body"
|
|
|
|
# Enable OpenTelemetry tracing
|
|
tracing:
|
|
otlp:
|
|
grpc:
|
|
endpoint: otel-collector:4317
|
|
insecure: true
|