traefik/dynamic/services.yaml

http:
  middlewares:
    basic-auth:
      basicAuth:
        usersFile: /auth/htpasswd

    websocket-headers:
      headers:
        customRequestHeaders:
          Connection: "Upgrade"
          Upgrade: "websocket"

    dcr-cors:
      headers:
        accessControlAllowOriginList:
          - "http://registry.aetoskia.com"
        accessControlAllowMethods:
          - GET
          - POST
          - PUT
          - DELETE
          - OPTIONS
        accessControlAllowHeaders:
          - Authorization
          - Content-Type
        accessControlMaxAge: 1728000

  routers:
    # Dashboard
    traefik-dashboard:
      rule: "Host(`traefik.aetoskia.com`)"
      entryPoints:
        - websecure
      service: api@internal
      tls:
        certResolver: aetoskia
      middlewares:
        - basic-auth

    # Media Services
    plex:
      rule: "Host(`plex.aetoskia.com`)"
      entryPoints:
        - websecure
      service: plex-svc
      tls:
        certResolver: aetoskia

    sonarr:
      rule: "Host(`sonarr.aetoskia.com`)"
      entryPoints:
        - websecure
      service: sonarr-svc
      tls:
        certResolver: aetoskia

    radarr:
      rule: "Host(`radarr.aetoskia.com`)"
      entryPoints:
        - websecure
      service: radarr-svc
      tls:
        certResolver: aetoskia

    jellyseerr:
      rule: "Host(`jellyseerr.aetoskia.com`)"
      entryPoints:
        - websecure
      service: jellyseerr-svc
      tls:
        certResolver: aetoskia

    ombi:
      rule: "Host(`ombi.aetoskia.com`)"
      entryPoints:
        - websecure
      service: ombi-svc
      tls:
        certResolver: aetoskia

    qbit:
      rule: "Host(`qbit.aetoskia.com`)"
      entryPoints:
        - websecure
      service: qbit-svc
      tls:
        certResolver: aetoskia
      middlewares:
        - websocket-headers

    # Codebase Services
    gitea:
      rule: "Host(`gitea.aetoskia.com`)"
      entryPoints:
        - websecure
      service: gitea-svc
      tls:
        certResolver: aetoskia
      middlewares:
        - websocket-headers

    drone:
      rule: "Host(`drone.aetoskia.com`)"
      entryPoints:
        - websecure
      service: drone-svc
      tls:
        certResolver: aetoskia
      middlewares:
        - websocket-headers

    dcr:
      rule: "Host(`dcr.aetoskia.com`)"
      entryPoints:
        - websecure
      service: dcr-svc
      tls:
        certResolver: aetoskia
      middlewares:
        - dcr-cors

    registry:
      rule: "Host(`registry.aetoskia.com`)"
      entryPoints:
        - websecure
      service: registry-svc
      tls:
        certResolver: aetoskia
#      middlewares:
#        - basic-auth

    # Monitoring
    portainer:
      rule: "Host(`portainer.aetoskia.com`)"
      entryPoints:
        - websecure
      service: portainer-svc
      tls:
        certResolver: aetoskia

  services:
    # Media
    plex-svc:
      loadBalancer:
        servers:
          - url: "http://server-pi:32400"

    sonarr-svc:
      loadBalancer:
        servers:
          - url: "http://server-pi:8989"

    radarr-svc:
      loadBalancer:
        servers:
          - url: "http://server-pi:7878"

    jellyseerr-svc:
      loadBalancer:
        servers:
          - url: "http://server-pi:5055"

    ombi-svc:
      loadBalancer:
        servers:
          - url: "http://server-pi:3579"

    qbit-svc:
      loadBalancer:
        servers:
          - url: "http://server-pi:8080"

    # Codebase
    gitea-svc:
      loadBalancer:
        servers:
          - url: "http://private-pi:6002"

    drone-svc:
      loadBalancer:
        servers:
          - url: "http://private-pi:6003"

    dcr-svc:
      loadBalancer:
        servers:
          - url: "http://private-pi:6005"

    registry-svc:
      loadBalancer:
        servers:
          - url: "http://private-pi:6001"

    # Monitoring
    portainer-svc:
      loadBalancer:
        servers:
          - url: "http://private-pi:7002"