diff --git a/base.yml b/base.yml index 28f74fc..bc98393 100644 --- a/base.yml +++ b/base.yml @@ -58,7 +58,11 @@ services: - "traefik.http.routers.api.rule=Host(`traefik.mistborn`)" - "traefik.http.routers.api.service=api@internal" - "traefik.http.routers.api.middlewares=mistborn_headers@file" - - "traefik.http.routers.api.entrypoints=web,websecure" + - "traefik.http.routers.api.entrypoints=web" + #- "traefik.http.services.internal.loadbalancer.server.port=5000" + - "traefik.http.middlewares.mistborn_auth.forwardAuth.address=http://${MISTBORN_BIND_IP}:5000/auth/" + - "traefik.http.middlewares.mistborn_auth.forwardAuth.trustForwardHeader=true" + - "traefik.http.middlewares.mistborn_auth.forwardAuth.tls.insecureSkipVerify=true" depends_on: - django volumes: diff --git a/compose/production/traefik/dynamic.toml b/compose/production/traefik/dynamic.toml index a9f26dd..04f29f5 100644 --- a/compose/production/traefik/dynamic.toml +++ b/compose/production/traefik/dynamic.toml @@ -8,24 +8,24 @@ [tls.options.default] minVersion = "VersionTLS12" -[http.services] - [http.services.cockpit.loadBalancer] - [[http.services.cockpit.loadBalancer.servers]] - url = "http://10.2.3.1:9090" +#[http.services] +# [http.services.cockpit.loadBalancer] +# [[http.services.cockpit.loadBalancer.servers]] +# url = "http://10.2.3.1:9090" -[http.routers] - [http.routers.cockpit] - rule = "Host(`cockpit.mistborn`)" - service = "cockpit" - entrypoints = ["web", "websecure"] - middlewares = ["mistborn_auth"] +#[http.routers] +# [http.routers.cockpit] +# rule = "Host(`cockpit.mistborn`)" +# service = "cockpit" +# entrypoints = ["web", "websecure"] +# middlewares = ["mistborn_auth"] -[http.middlewares] - [http.middlewares.mistborn_auth.forwardAuth] - address = "http://10.2.3.1:5000/auth/" - trustForwardHeader = true - [http.middlewares.mistborn_auth.forwardAuth.tls] - insecureSkipVerify = true +#[http.middlewares] +# [http.middlewares.mistborn_auth.forwardAuth] +# address = "http://10.2.3.1:5000/auth/" +# trustForwardHeader = true +# [http.middlewares.mistborn_auth.forwardAuth.tls] +# insecureSkipVerify = true [http.middlewares.mistborn_headers.headers] hostsProxyHeaders = ['X-CSRFToken'] \ No newline at end of file