diff --git a/templates/Nextcloud/0/docker-compose.yml b/templates/Nextcloud/0/docker-compose.yml index b68fc71..0d40c90 100644 --- a/templates/Nextcloud/0/docker-compose.yml +++ b/templates/Nextcloud/0/docker-compose.yml @@ -43,31 +43,31 @@ services: ### Begin Traefik Configuration traefik.enable: true # Routers - traefik.http.routers.nextcloud-router-http.entrypoints: http - traefik.http.routers.nextcloud-router-http.rule: Host(`${TRAEFIK_HOST}`) - traefik.http.routers.nextcloud-router-http.middlewares: nextcloud-redirectHttp - traefik.http.routers.nextcloud-router-http.service: nextcloud-service - traefik.http.routers.nextcloud-router-https.entrypoints: https - traefik.http.routers.nextcloud-router-https.rule: Host(`${TRAEFIK_HOST}`) - traefik.http.routers.nextcloud-router-https.middlewares: nextcloud-redirectDav, nextcloud-security - traefik.http.routers.nextcloud-router-https.tls: true - traefik.http.routers.nextcloud-router-https.tls.certresolver: letsencrypt - traefik.http.routers.nextcloud-router-https.service: nextcloud-service + traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http + traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`) + traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp + traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service + traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https + traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`) + traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-redirectDav, {{.Stack.Name}}-security + traefik.http.routers.{{.Stack.Name}}-router-https.tls: true + traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt + traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service # Middlewares - traefik.http.middlewares.nextcloud-redirectDav.redirectregex.permanent: true - traefik.http.middlewares.nextcloud-redirectDav.redirectregex.regex: /.well-known/(card|cal)dav - traefik.http.middlewares.nextcloud-redirectDav.redirectregex.replacement: /remote.php/dav/ - traefik.http.middlewares.nextcloud-redirectHttp.redirectscheme.permanent: true - traefik.http.middlewares.nextcloud-redirectHttp.redirectscheme.scheme: https - traefik.http.middlewares.nextcloud-security.headers.forceSTSHeader: true - traefik.http.middlewares.nextcloud-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information - traefik.http.middlewares.nextcloud-security.headers.sslredirect: true # Maybe good for redundancy? - traefik.http.middlewares.nextcloud-security.headers.stsIncludeSubdomains: true - traefik.http.middlewares.nextcloud-security.headers.stsPreload: true - traefik.http.middlewares.nextcloud-security.headers.stsSeconds: "15552000" + traefik.http.middlewares.{{.Stack.Name}}-redirectDav.redirectregex.permanent: true + traefik.http.middlewares.{{.Stack.Name}}-redirectDav.redirectregex.regex: /.well-known/(card|cal)dav + traefik.http.middlewares.{{.Stack.Name}}-redirectDav.redirectregex.replacement: /remote.php/dav/ + traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true + traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https + traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true + traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information + traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy? + traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true + traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true + traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000" # Services - traefik.http.services.nextcloud-service.loadbalancer.passhostheader: true - traefik.http.services.nextcloud-service.loadbalancer.server.port: "80" + traefik.http.services.{{.Stack.Name}}-service.loadbalancer.passhostheader: true + traefik.http.services.{{.Stack.Name}}-service.loadbalancer.server.port: "80" ### End Traefik Configuration links: - mysql