init

traefik/dynamic/routes.yml

@@ -0,0 +1,102 @@
+http:
+  routers:
+    downloads:
+      rule: Host(`files.antigol.ru`)
+      entryPoints:
+        - websecure
+      service: downloads
+      tls:
+        certResolver: letsencrypt
+
+    frontend:
+      rule: Host(`antigol.ru`)
+      entryPoints:
+        - websecure
+      service: frontend
+      tls:
+        certResolver: letsencrypt
+
+    backend:
+      rule: Host(`api.antigol.ru`)
+      entryPoints:
+        - websecure
+      service: backend
+      tls:
+        certResolver: letsencrypt
+
+    chat:
+      rule: Host(`chat.antigol.ru`)
+      entryPoints:
+        - websecure
+      service: chat
+      tls:
+        certResolver: letsencrypt
+
+    adminer:
+      rule: Host(`db.antigol.ru`)
+      entryPoints:
+        - websecure
+      service: adminer
+      tls:
+        certResolver: letsencrypt
+
+    dockmon:
+      rule: Host(`monitor.antigol.ru`)
+      entryPoints:
+        - websecure
+      service: dockmon
+      tls:
+        certResolver: letsencrypt
+
+    traefik-dashboard:
+      rule: Host(`traefik.antigol.ru`)
+      entryPoints:
+        - websecure
+      service: api@internal
+      middlewares:
+        - dashboard-auth
+        - dashboard-security-headers
+      tls:
+        certResolver: letsencrypt
+
+  services:
+    downloads:
+      loadBalancer:
+        servers:
+          - url: http://downloads:8080
+
+    frontend:
+      loadBalancer:
+        servers:
+          - url: http://frontend:3000
+
+    backend:
+      loadBalancer:
+        servers:
+          - url: http://backend:4000
+
+    chat:
+      loadBalancer:
+        servers:
+          - url: http://chat-service:4050
+
+    adminer:
+      loadBalancer:
+        servers:
+          - url: http://adminer:8080
+
+    dockmon:
+      loadBalancer:
+        servers:
+          - url: http://dockmon:80
+
+  middlewares:
+    dashboard-auth:
+      basicAuth:
+        usersFile: /etc/traefik/secrets/dashboard-users
+    dashboard-security-headers:
+      headers:
+        contentTypeNosniff: true
+        browserXssFilter: true
+        frameDeny: true
+        referrerPolicy: "no-referrer"

traefik/secrets/dashboard-users.example

@@ -0,0 +1 @@
+admin:$apr1$replace_this$replace_this_with_a_real_htpasswd_hash