forked from coop-cloud/traefik
fauno
4f1b71c8d6
> trustForwardHeader is not configured: this creates an inconsistent > security behavior where some X-Forwarded headers (e.g. > X-Forwarded-For, X-Forwarded-Proto) are removed but others (e.g. > X-Forwarded-Prefix) are forwarded untouched. Please set it to false to > remove all X-Forwarded headers, or true to trust them all. <!-- Thank you for doing recipe maintenance work! Please mark all checklist items which are relevant for your changes. Please remove the checklist items which are not relevant for your changes. Feel free to remove this comment. --> * [x] I have deployed and tested my changes * [ ] I have [updated relevant versions in `abra.sh`](https://docs.coopcloud.tech/maintainers/upgrade/#updating-versions-in-the-abrash) * [ ] I have made my environment variable changes [backwards compatible](https://docs.coopcloud.tech/maintainers/upgrade/#backwards-compatible-environment-variable-changes) * [ ] I have added a [release note entry](https://docs.coopcloud.tech/maintainers/upgrade/#creating-new-release-notes) Reviewed-on: coop-cloud/traefik#116 Reviewed-by: decentral1se <2+decentral1se@noreply.git.coopcloud.tech> Reviewed-by: p4u1 <133+p4u1@noreply.git.coopcloud.tech> Co-authored-by: f <f@sutty.nl> Co-committed-by: f <f@sutty.nl>
32 lines
1.2 KiB
YAML
32 lines
1.2 KiB
YAML
---
|
|
version: "3.8"
|
|
services:
|
|
app:
|
|
deploy:
|
|
labels:
|
|
- "traefik.http.middlewares.anubis.forwardauth.address=http://anubis:8080/.within.website/x/cmd/anubis/api/check"
|
|
- "traefik.http.middlewares.anubis.forwardauth.trustForwardHeader=true"
|
|
anubis:
|
|
image: "ghcr.io/techarohq/anubis:v1.25.0"
|
|
environment:
|
|
BIND: ":8080"
|
|
TARGET: " "
|
|
REDIRECT_DOMAINS: "${ANUBIS_REDIRECT_DOMAINS}"
|
|
COOKIE_DOMAIN: "${ANUBIS_COOKIE_DOMAIN}"
|
|
PUBLIC_URL: "https://${ANUBIS_DOMAIN}"
|
|
OG_PASSTHROUGH: "${ANUBIS_OG_PASSTHROUGH}"
|
|
OG_EXPIRY_TIME: "${ANUBIS_OG_EXPIRY_TIME}"
|
|
OG_CACHE_CONSIDER_HOST: "${ANUBIS_OG_CACHE_CONSIDER_HOST}"
|
|
SERVE_ROBOTS_TXT: "${ANUBIS_SERVE_ROBOTS_TXT}"
|
|
SLOG_LEVEL: "${ANUBIS_SLOG_LEVEL:-INFO}"
|
|
networks:
|
|
- proxy
|
|
deploy:
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.anubis.rule=Host(`${ANUBIS_DOMAIN}`)"
|
|
- "traefik.http.routers.anubis.tls.certresolver=${LETS_ENCRYPT_ENV}"
|
|
- "traefik.http.routers.anubis.entrypoints=web-secure"
|
|
- "traefik.http.services.anubis.loadbalancer.server.port=8080"
|
|
- "traefik.http.routers.anubis.service=anubis"
|