restructure

modules/features/traefik/config/routing.yml

@@ -0,0 +1,75 @@
+http: 
+  routers: 
+    
+    homepageSecure: 
+      entryPoints: 
+        - "websecure" 
+        - "localsecure"
+      rule: "Host(`esotericbytes.com`) || Host(`www.esotericbytes.com`)"
+      service: "homepage"
+      middlewares:
+        - authentik
+      tls:
+        certResolver: "cloudflare"
+    
+    code-server: 
+      entryPoints: 
+        - "localsecure"
+      rule: "Host(`code.esotericbytes.com`)"
+      service: "code-server"
+      tls:
+        certResolver: "cloudflare"
+
+    gitea: 
+      entryPoints: 
+        - "localsecure"
+        - "websecure"
+      rule: "Host(`gitea.esotericbytes.com`)"
+      service: "gitea"
+      tls:
+        certResolver: "cloudflare"
+
+    octoprint:
+      entryPoints:
+        - "localsecure"
+        #- "websecure"
+      rule: "Host(`3dp.esotericbytes.com`)"
+      service: "octoprint"
+      tls:
+        certResolver: "cloudflare"
+
+  services: 
+    homepage:
+      loadBalancer:
+        servers: 
+          - url: "http://192.168.100.13:80"
+      
+    code-server:
+      loadBalancer:
+        servers: 
+          - url: "http://192.168.100.31:4444"
+    
+    gitea:
+      loadBalancer:
+        servers: 
+          - url: "http://192.168.100.20:3000"
+    
+    octoprint:
+      loadBalancer:
+        servers:
+          - url: "http://rpi-3dp.local"
+        passHostHeader: true
+
+tcp:
+  routers:
+    gitea-ssh:
+      entryPoints:
+        - "gitea-ssh"
+      rule: "HostSNI(`*`)"
+      service: "gitea-ssh"
+
+  services:
+    gitea-ssh:
+      loadBalancer:
+        servers:
+          - address: "192.168.100.20:2222"

modules/features/traefik/config/traefik.yml

@@ -0,0 +1,87 @@
+providers:
+  docker:
+    exposedByDefault: false
+  file:
+    filename: "/etc/traefik/routing.yml"
+
+serversTransport:
+  insecureSkipVerify: true
+
+api: 
+  dashboard: true
+
+global: 
+  checknewversion: true
+  sendanonymoususage: false
+
+entryPoints: 
+  web: 
+    address: ":81"
+    http:
+      redirections:
+        entryPoint: 
+          to: "websecure"
+          scheme: "https"
+
+  websecure: 
+    address: ":444"
+    asDefault: true
+    transport:
+      respondingTimeouts:
+        readTimeout: 24h
+    http:
+      tls: 
+        certResolver: "cloudflare"
+        domains: 
+          main: "esotericbytes.com"
+          sans:
+            - "*.esotericbytes.com" 
+      encodedCharacters:  
+        allowEncodedSlash: true
+        allowEncodedQuestionMark: true
+        allowEncodedPercent: true
+  
+  local: 
+    address: ":80"
+    http:
+      redirections:
+        entryPoint: 
+          to: "localsecure"
+          scheme: "https"
+
+  localsecure: 
+    address: ":443"
+    asDefault: true
+    transport:
+      respondingTimeouts:
+        readTimeout: 24h
+    http:
+      tls: 
+        certResolver: "cloudflare"
+        domains: 
+          main: "esotericbytes.com"
+          sans:
+            - "*.esotericbytes.com" 
+      encodedCharacters:  
+        allowEncodedSlash: true
+        allowEncodedQuestionMark: true
+        allowEncodedPercent: true
+  gitea-ssh:
+    address: ":2222"
+
+log: 
+  level: "INFO"
+  filePath: "/etc/traefik/logs/traefik.log"
+  format: "json"
+
+certificatesResolvers: 
+  cloudflare: 
+    acme: 
+      storage: "/etc/traefik/acme.json"
+      keyType: "EC256"
+      dnsChallenge: 
+        provider: "cloudflare"
+        resolvers:
+          - "1.1.1.1:53" 
+          - "1.0.0.1:53"
+