From 9da4cfd43e1dd8ad22ed39c92dec0e161ab80cae Mon Sep 17 00:00:00 2001 From: Steven Foerster Date: Tue, 18 Aug 2020 20:15:55 +0000 Subject: [PATCH] traefik forward auth --- README.md | 2 +- base.yml | 2 ++ compose/production/traefik/dynamic.toml | 2 +- 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index adeb7ce..9115548 100644 --- a/README.md +++ b/README.md @@ -118,7 +118,7 @@ In Mistborn, Gateways are upstream from the VPN server so connections to third-p The Gateway adds an extra network hop. DNS is still resolved in Mistborn so pihole is still blocking ads. # Installation -Mistborn is regularly tested on Ubuntu 18.04 LTS (DigitalOcean droplet with 2 GB RAM). It has also been successfully used on Debian Buster and Raspbian Buster systems (though not regularly tested). Additionally tested on Ubuntu 20.04 LTS. +Mistborn is regularly tested on Ubuntu 20.04 LTS (DigitalOcean droplet with 2 GB RAM). It has also been successfully used on Debian Buster and Raspbian Buster systems (though not regularly tested). Make sure to install OS updates and restart before installing Mistborn (Wireguard installs differently on recent kernels). Clone the git repository and run the install script: ``` diff --git a/base.yml b/base.yml index f0536ef..04be844 100644 --- a/base.yml +++ b/base.yml @@ -12,6 +12,8 @@ services: depends_on: - postgres - redis + ports: + - "10.2.3.1:5000:5000/tcp" # auth access labels: - "traefik.enable=true" - "traefik.http.routers.django-http.rule=Host(`home.mistborn`)" diff --git a/compose/production/traefik/dynamic.toml b/compose/production/traefik/dynamic.toml index 0eeb776..3d3adbe 100644 --- a/compose/production/traefik/dynamic.toml +++ b/compose/production/traefik/dynamic.toml @@ -22,7 +22,7 @@ [http.middlewares] [http.middlewares.mistborn_auth.forwardAuth] - address = "https://home.mistborn/auth/" + address = "http://10.2.3.1:5000/auth/" trustForwardHeader = true [http.middlewares.mistborn_auth.forwardAuth.tls] insecureSkipVerify = true