Compare commits
1
Commits
master
..
codeowners
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
dfb4adeb45 |
-10
@@ -249,13 +249,3 @@ WRITE_TIMEOUT=0s
|
|||||||
#
|
#
|
||||||
# https://doc.traefik.io/traefik/reference/install-configuration/entrypoints/#opt-forwardedHeaders-trustedIPs
|
# https://doc.traefik.io/traefik/reference/install-configuration/entrypoints/#opt-forwardedHeaders-trustedIPs
|
||||||
#TRUSTED_IPS="['10.13.12.1']" # 10.13.12.1 is an example
|
#TRUSTED_IPS="['10.13.12.1']" # 10.13.12.1 is an example
|
||||||
|
|
||||||
## Rate limits
|
|
||||||
# You can enable universal rate limits by setting RATE_LIMIT_EVERYTHING
|
|
||||||
# to true, otherwise each app needs to export their own middleware labels.
|
|
||||||
#
|
|
||||||
# https://doc.traefik.io/traefik/reference/routing-configuration/http/middlewares/ratelimit/
|
|
||||||
#RATE_LIMIT_EVERYTHING=false
|
|
||||||
#RATE_LIMIT_AVERAGE=100
|
|
||||||
#RATE_LIMIT_BURST=200
|
|
||||||
#RATE_LIMIT_PERIOD=1s
|
|
||||||
|
|||||||
@@ -1,4 +1,4 @@
|
|||||||
export TRAEFIK_YML_VERSION=v37
|
export TRAEFIK_YML_VERSION=v36
|
||||||
export FILE_PROVIDER_YML_VERSION=v14
|
export FILE_PROVIDER_YML_VERSION=v13
|
||||||
export ENTRYPOINT_VERSION=v5
|
export ENTRYPOINT_VERSION=v5
|
||||||
export ANUBIS_YML_VERSION=v1
|
export ANUBIS_YML_VERSION=v1
|
||||||
|
|||||||
+1
-1
@@ -7,7 +7,7 @@ services:
|
|||||||
- "traefik.http.middlewares.anubis.forwardauth.address=http://anubis:8080/.within.website/x/cmd/anubis/api/check"
|
- "traefik.http.middlewares.anubis.forwardauth.address=http://anubis:8080/.within.website/x/cmd/anubis/api/check"
|
||||||
- "traefik.http.middlewares.anubis.forwardauth.trustForwardHeader=true"
|
- "traefik.http.middlewares.anubis.forwardauth.trustForwardHeader=true"
|
||||||
anubis:
|
anubis:
|
||||||
image: "ghcr.io/techarohq/anubis:v1.28.1"
|
image: "ghcr.io/techarohq/anubis:v1.27.0"
|
||||||
environment:
|
environment:
|
||||||
BIND: ":8080"
|
BIND: ":8080"
|
||||||
TARGET: " "
|
TARGET: " "
|
||||||
|
|||||||
@@ -22,11 +22,6 @@ http:
|
|||||||
basicAuth:
|
basicAuth:
|
||||||
usersFile: "/run/secrets/usersfile"
|
usersFile: "/run/secrets/usersfile"
|
||||||
{{ end }}
|
{{ end }}
|
||||||
ip-rate-limit:
|
|
||||||
rateLimit:
|
|
||||||
average: {{ or (env "RATE_LIMIT_AVERAGE") "100" }}
|
|
||||||
burst: {{ or (env "RATE_LIMIT_BURST") "200" }}
|
|
||||||
period: {{ or (env "RATE_LIMIT_PERIOD") "1s" }}
|
|
||||||
security:
|
security:
|
||||||
headers:
|
headers:
|
||||||
frameDeny: true
|
frameDeny: true
|
||||||
@@ -75,4 +70,4 @@ tls:
|
|||||||
certificates:
|
certificates:
|
||||||
- certFile: /run/secrets/ssl_cert
|
- certFile: /run/secrets/ssl_cert
|
||||||
keyFile: /run/secrets/ssl_key
|
keyFile: /run/secrets/ssl_key
|
||||||
{{ end }}
|
{{ end }}
|
||||||
@@ -1,6 +0,0 @@
|
|||||||
# Rate limits
|
|
||||||
|
|
||||||
You can enable rate limits globally by updating the .env file for
|
|
||||||
Traefik. Per-app rate limits need to be supported by each app!
|
|
||||||
|
|
||||||
Limits can be tested with benchmarking tools like `wrk`.
|
|
||||||
@@ -65,10 +65,6 @@ entrypoints:
|
|||||||
allowEncodedPercent: true
|
allowEncodedPercent: true
|
||||||
allowEncodedQuestionMark: true
|
allowEncodedQuestionMark: true
|
||||||
allowEncodedHash: true
|
allowEncodedHash: true
|
||||||
{{ if eq (env "RATE_LIMIT_EVERYTHING") "true" }}
|
|
||||||
middlewares:
|
|
||||||
- "ip-rate-limit@file"
|
|
||||||
{{ end }}
|
|
||||||
{{- if eq (env "GITEA_SSH_ENABLED") "1" }}
|
{{- if eq (env "GITEA_SSH_ENABLED") "1" }}
|
||||||
gitea-ssh:
|
gitea-ssh:
|
||||||
address: ":2222"
|
address: ":2222"
|
||||||
|
|||||||
Reference in New Issue
Block a user