Gan, Jimmy
4b32929dcc
Deploy Dashboard (Dev) / deploy-dev (push) Successful in 1m54s
- watchtower: docker-compose with label filtering, email notifications - watchtower labels on navidrome, openclaw, immich services - dev env: docker-compose.dev.yml (port 4001), deploy-dev.yml CI workflow - dev.nas.jimmygan.com Caddy site block with Authelia forward_auth - security page: backend router parsing Authelia/Caddy container logs - security page: frontend with stats cards, timeline, top IPs, event log - wired security route into App.svelte and Sidebar
85 lines
2.0 KiB
Plaintext
Executable File
85 lines
2.0 KiB
Plaintext
Executable File
{
|
|
https_port 8443
|
|
http_port 8880
|
|
servers {
|
|
protocols h1 h2
|
|
}
|
|
}
|
|
|
|
# Authelia endpoint (no forward_auth on itself)
|
|
auth.jimmygan.com {
|
|
tls {
|
|
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
|
}
|
|
reverse_proxy 127.0.0.1:9092
|
|
}
|
|
|
|
# Protected services with forward_auth
|
|
nas.jimmygan.com {
|
|
tls {
|
|
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
|
}
|
|
forward_auth 127.0.0.1:9092 {
|
|
uri /api/verify?rd=https://auth.jimmygan.com:8443
|
|
copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
|
|
}
|
|
reverse_proxy 127.0.0.1:4000
|
|
}
|
|
|
|
music.jimmygan.com {
|
|
tls {
|
|
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
|
}
|
|
forward_auth 127.0.0.1:9092 {
|
|
uri /api/verify?rd=https://auth.jimmygan.com:8443
|
|
copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
|
|
}
|
|
reverse_proxy 127.0.0.1:4533 {
|
|
flush_interval -1
|
|
}
|
|
}
|
|
|
|
n8n.jimmygan.com {
|
|
tls {
|
|
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
|
}
|
|
forward_auth 127.0.0.1:9092 {
|
|
uri /api/verify?rd=https://auth.jimmygan.com:8443
|
|
copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
|
|
}
|
|
reverse_proxy 127.0.0.1:5678
|
|
}
|
|
|
|
ldap.jimmygan.com {
|
|
tls {
|
|
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
|
}
|
|
forward_auth 127.0.0.1:9092 {
|
|
uri /api/verify?rd=https://auth.jimmygan.com:8443
|
|
copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
|
|
}
|
|
reverse_proxy 127.0.0.1:17170
|
|
}
|
|
|
|
dev.nas.jimmygan.com {
|
|
tls {
|
|
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
|
}
|
|
forward_auth 127.0.0.1:9092 {
|
|
uri /api/verify?rd=https://auth.jimmygan.com:8443
|
|
copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
|
|
}
|
|
reverse_proxy 127.0.0.1:4001
|
|
}
|
|
|
|
git.jimmygan.com {
|
|
tls {
|
|
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
|
}
|
|
forward_auth 127.0.0.1:9092 {
|
|
uri /api/verify?rd=https://auth.jimmygan.com:8443
|
|
copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
|
|
}
|
|
reverse_proxy 127.0.0.1:3300
|
|
}
|