tommy
c9aac20e73
Ansible-managed (inline-compose, file-provider router, host :8099), idempotent (changed=0). PBS-backed pg_dump (daily, keep 14) with verified round-trip restore; ntfy 'garage' reminder probe (.190); Diun repo-watch for new tags; Homepage tile+widget. Secrets via ansible-vault / /etc env files / HOMEPAGE_VAR — none in repo. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
22 lines
755 B
YAML
22 lines
755 B
YAML
# File-provider router for LubeLogger — merged into node01
|
|
# /home/tommy/traefik/dynamic_conf.yml (live) under http.routers and http.services.
|
|
# Traefik watch=true hot-reloads on change. (Reference copy; the live file is authoritative.)
|
|
|
|
# --- under http.routers: ---
|
|
lubelogger:
|
|
rule: "Host(`lubelogger.goattw.net`)"
|
|
entryPoints:
|
|
- websecure
|
|
middlewares:
|
|
- authelia-auth@file # crowdsec-bouncer@file applies globally at the websecure entrypoint
|
|
service: lubelogger-service
|
|
tls:
|
|
certResolver: letsencrypt
|
|
|
|
# --- under http.services: ---
|
|
lubelogger-service:
|
|
loadBalancer:
|
|
servers:
|
|
- url: "http://192.168.99.186:8099"
|
|
serversTransport: default-transport
|