pixelifytica/nixos
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Enable sniStrict to drop requests from domains without routers

Browse source
This commit is contained in:
Evie Litherland-Smith 2023-05-30 12:13:03 +01:00
parent 15c427f812
commit 7b66f284f6
1 changed files with 23 additions and 18 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

41
services/traefik/default.nix
View file

@ -25,24 +25,29 @@
}; };
}; };
}; };
dynamicConfigOptions.http = { dynamicConfigOptions = {
routers.api = { tls.options.default.sniStrict = true;
rule = "Host(`traefik.xenia.me.uk`)"; http = {
entryPoints = ["http" "https"]; routers = {
service = "api@internal"; api = {
middlewares = ["auth"]; rule = "Host(`traefik.xenia.me.uk`)";
tls = {certResolver = "default";}; entryPoints = ["http" "https"];
}; service = "api@internal";
routers.api-internal = { middlewares = ["auth"];
rule = "ClientIP(`192.168.0.0/16`)"; tls = {certResolver = "default";};
entryPoints = ["traefik-internal"]; };
service = "api@internal"; api-internal = {
}; rule = "ClientIP(`192.168.0.0/16`)";
middlewares = { entryPoints = ["traefik-internal"];
auth.basicAuth.users = ["xenia:$apr1$LB0wVd6I$BHVPIyh.F5Ewt9/7PqAtS."]; service = "api@internal";
hsts.headers = { };
stsSeconds = "31536000"; };
stsIncludeSubdomains = true; middlewares = {
auth.basicAuth.users = ["xenia:$apr1$LB0wVd6I$BHVPIyh.F5Ewt9/7PqAtS."];
hsts.headers = {
stsSeconds = "31536000";
stsIncludeSubdomains = true;
};
}; };
}; };
}; };