traefik services setup

dynamic/services.yaml

@@ -0,0 +1,190 @@
+http:
+  middlewares:
+    basic-auth:
+      basicAuth:
+        usersFile: /auth/htpasswd
+
+    websocket-headers:
+      headers:
+        customRequestHeaders:
+          Connection: "Upgrade"
+          Upgrade: "websocket"
+
+    dcr-cors:
+      headers:
+        accessControlAllowOrigin: "http://registry.aetoskia.com"
+        accessControlAllowMethods: "GET, POST, PUT, DELETE, OPTIONS"
+        accessControlAllowHeaders: "Authorization, Content-Type"
+        accessControlMaxAge: 1728000
+
+  routers:
+    # Dashboard
+    traefik-dashboard:
+      rule: "Host(`traefik.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: traefik-svc
+      tls:
+        certResolver: aetoskia
+      middlewares:
+        - basic-auth
+
+    # Media Services
+    plex:
+      rule: "Host(`plex.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: plex-svc
+      tls:
+        certResolver: aetoskia
+
+    sonarr:
+      rule: "Host(`sonarr.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: sonarr-svc
+      tls:
+        certResolver: aetoskia
+
+    radarr:
+      rule: "Host(`radarr.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: radarr-svc
+      tls:
+        certResolver: aetoskia
+
+    jellyseerr:
+      rule: "Host(`jellyseerr.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: jellyseerr-svc
+      tls:
+        certResolver: aetoskia
+
+    ombi:
+      rule: "Host(`ombi.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: ombi-svc
+      tls:
+        certResolver: aetoskia
+
+    qbit:
+      rule: "Host(`qbit.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: qbit-svc
+      tls:
+        certResolver: aetoskia
+      middlewares:
+        - websocket-headers
+
+    # Codebase Services
+    gitea:
+      rule: "Host(`gitea.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: gitea-svc
+      tls:
+        certResolver: aetoskia
+      middlewares:
+        - websocket-headers
+
+    drone:
+      rule: "Host(`drone.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: drone-svc
+      tls:
+        certResolver: aetoskia
+      middlewares:
+        - websocket-headers
+
+    dcr:
+      rule: "Host(`dcr.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: dcr-svc
+      tls:
+        certResolver: aetoskia
+      middlewares:
+        - dcr-cors
+
+    registry:
+      rule: "Host(`registry.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: registry-svc
+      tls:
+        certResolver: aetoskia
+#      middlewares:
+#        - basic-auth
+
+    # Monitoring
+    portainer:
+      rule: "Host(`portainer.aetoskia.com`)"
+      entryPoints:
+        - websecure
+      service: portainer-svc
+      tls:
+        certResolver: aetoskia
+
+  services:
+    # Media
+    plex-svc:
+      loadBalancer:
+        servers:
+          - url: "http://server-pi:32400"
+
+    sonarr-svc:
+      loadBalancer:
+        servers:
+          - url: "http://server-pi:8989"
+
+    radarr-svc:
+      loadBalancer:
+        servers:
+          - url: "http://server-pi:7878"
+
+    jellyseerr-svc:
+      loadBalancer:
+        servers:
+          - url: "http://server-pi:5055"
+
+    ombi-svc:
+      loadBalancer:
+        servers:
+          - url: "http://server-pi:3579"
+
+    qbit-svc:
+      loadBalancer:
+        servers:
+          - url: "http://server-pi:8080"
+
+    # Codebase
+    gitea-svc:
+      loadBalancer:
+        servers:
+          - url: "http://private-pi:6002"
+
+    drone-svc:
+      loadBalancer:
+        servers:
+          - url: "http://private-pi:6003"
+
+    dcr-svc:
+      loadBalancer:
+        servers:
+          - url: "http://private-pi:6005"
+
+    registry-svc:
+      loadBalancer:
+        servers:
+          - url: "http://private-pi:6001"
+
+    # Monitoring
+    portainer-svc:
+      loadBalancer:
+        servers:
+          - url: "http://private-pi:7002"