Compare commits
1
Commits
master
..
codeowners
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
dfb4adeb45 |
-10
@@ -249,13 +249,3 @@ WRITE_TIMEOUT=0s
|
||||
#
|
||||
# https://doc.traefik.io/traefik/reference/install-configuration/entrypoints/#opt-forwardedHeaders-trustedIPs
|
||||
#TRUSTED_IPS="['10.13.12.1']" # 10.13.12.1 is an example
|
||||
|
||||
## Rate limits
|
||||
# You can enable universal rate limits by setting RATE_LIMIT_EVERYTHING
|
||||
# to true, otherwise each app needs to export their own middleware labels.
|
||||
#
|
||||
# https://doc.traefik.io/traefik/reference/routing-configuration/http/middlewares/ratelimit/
|
||||
#RATE_LIMIT_EVERYTHING=false
|
||||
#RATE_LIMIT_AVERAGE=100
|
||||
#RATE_LIMIT_BURST=200
|
||||
#RATE_LIMIT_PERIOD=1s
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
export TRAEFIK_YML_VERSION=v37
|
||||
export FILE_PROVIDER_YML_VERSION=v14
|
||||
export TRAEFIK_YML_VERSION=v36
|
||||
export FILE_PROVIDER_YML_VERSION=v13
|
||||
export ENTRYPOINT_VERSION=v5
|
||||
export ANUBIS_YML_VERSION=v1
|
||||
|
||||
+1
-1
@@ -7,7 +7,7 @@ services:
|
||||
- "traefik.http.middlewares.anubis.forwardauth.address=http://anubis:8080/.within.website/x/cmd/anubis/api/check"
|
||||
- "traefik.http.middlewares.anubis.forwardauth.trustForwardHeader=true"
|
||||
anubis:
|
||||
image: "ghcr.io/techarohq/anubis:v1.28.1"
|
||||
image: "ghcr.io/techarohq/anubis:v1.27.0"
|
||||
environment:
|
||||
BIND: ":8080"
|
||||
TARGET: " "
|
||||
|
||||
@@ -22,11 +22,6 @@ http:
|
||||
basicAuth:
|
||||
usersFile: "/run/secrets/usersfile"
|
||||
{{ end }}
|
||||
ip-rate-limit:
|
||||
rateLimit:
|
||||
average: {{ or (env "RATE_LIMIT_AVERAGE") "100" }}
|
||||
burst: {{ or (env "RATE_LIMIT_BURST") "200" }}
|
||||
period: {{ or (env "RATE_LIMIT_PERIOD") "1s" }}
|
||||
security:
|
||||
headers:
|
||||
frameDeny: true
|
||||
@@ -75,4 +70,4 @@ tls:
|
||||
certificates:
|
||||
- certFile: /run/secrets/ssl_cert
|
||||
keyFile: /run/secrets/ssl_key
|
||||
{{ end }}
|
||||
{{ end }}
|
||||
@@ -1,6 +0,0 @@
|
||||
# Rate limits
|
||||
|
||||
You can enable rate limits globally by updating the .env file for
|
||||
Traefik. Per-app rate limits need to be supported by each app!
|
||||
|
||||
Limits can be tested with benchmarking tools like `wrk`.
|
||||
@@ -65,10 +65,6 @@ entrypoints:
|
||||
allowEncodedPercent: true
|
||||
allowEncodedQuestionMark: true
|
||||
allowEncodedHash: true
|
||||
{{ if eq (env "RATE_LIMIT_EVERYTHING") "true" }}
|
||||
middlewares:
|
||||
- "ip-rate-limit@file"
|
||||
{{ end }}
|
||||
{{- if eq (env "GITEA_SSH_ENABLED") "1" }}
|
||||
gitea-ssh:
|
||||
address: ":2222"
|
||||
|
||||
Reference in New Issue
Block a user