Update Traefik configuration with enhanced routing rules, local IP allowlist for dashboard access, new strip prefix middleware, and extended CORS origins. Add ACME account configurations for certificate management.

2026-03-18 10:58:17 +01:00
parent db42f9ef95
commit f04f79e3da
3 changed files with 40 additions and 4 deletions
@@ -1 +1,16 @@
-{}
+{
+  "le_io": {
+    "Account": {
+      "Email": "jb@truckwash.dk",
+      "Registration": {
+        "body": {
+          "status": "valid"
+        },
+        "uri": "https://acme-v02.api.letsencrypt.org/acme/acct/3156107901"
+      },
+      "PrivateKey": "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",
+      "KeyType": "4096"
+    },
+    "Certificates": null
+  }
+}
@@ -1 +1,16 @@
-{}
+{
+  "le": {
+    "Account": {
+      "Email": "jb@truckwash.dk",
+      "Registration": {
+        "body": {
+          "status": "valid"
+        },
+        "uri": "https://acme-v02.api.letsencrypt.org/acme/acct/3156106721"
+      },
+      "PrivateKey": "MIIJKQIBAAKCAgEAwaJI15iiqVnfviV1wClLGYpz89cwgLfUGuTkAbW0Sc/+x5opz6AT0lxSg421FeT7fBqtzGojnYeZ1/VvZWtIgLv6KgvaAsllNSZuwyEbBXdbEhvyv3Ze4a7DW4KeoJn1qjlwIOPkXe9An4isxRVBrpO/AK+G/ZURSU4C6roYhr+qj5lFKciI6f6n7xMOgQ/5drDEWI3fw8VanFSyZgBc4b/vKJciU0S/+UvmWs7zuuD+muesXHFKQogltps4uLJ1DscXmkaYLYgohVBsvPRrJBz1tqKkRVRsxbLcDO2ImMFLbZP45UySgG7OrfCrvnPcRFegj/RoJBiI2FfvOcM8bK0NBc3Vyp91o3p5F0VsOdhMWDFsNLtG4LNhgX+fovlEOpM3GhwJxHe4fu5fYbMaxYQ4abozLO3Exw510Q3gVqg3KpUTeH5Mmy+r8/+np1B6auYQX/G28PqYiMwOAFba00kmahi1j6fvd5v7fB0tXg8XpMnXEDwJ+J8Iy2p5pDc8K5YibSbRj992Z2Kzs1/IRijw+MbyZnWE8DoQ5vFthJIcCodYcVolQ/shE8hWVzjvwWCInee/56tTLDzenmBldyyij7K7wfjU7waqiHqxBIYgfyJDkoVJaIEAhdWomPyAaSxFfTIOvn32PL9bI9qKlm6TljjFkkZoceI283cmgzkCAwEAAQKCAgAmNoYkkhlLzZJDvrXJufx5qmKutQF77Ytc0V4T3k2ZoYQY1Ro6QM+YnKKmFqGtk/Zza/pvlGS58mhQf72/qJfy2+YHRTZ9hUxFXHPQa2ifQApHfR9/XHdmF2yzUwhGDow2T0aLHx5S0WQR99GMxWCkeMDhfEJqKfBy5IPb2eT8NrgMxcUp9UrbzudKXZrnqoTjQQhGp50I0BpNLsPUMG8kGBI1Evpxr2gpZSqtMhlUgJGOdXkE91Cd56t1qZVckc9bHrxQNG1U0wGYKaKD+cJpKpPtOpSrn/klXOJjZL8n0kG1+tVMPzvMP9Hm7s+d8tR94kMsFaI1uWfMNjJeVmLGgRL/xtDG+LnNYXzLGV33cOsrYr0D2bXZq4EYYa1RhelMx2bAmonE5sXudW6WGZxJEQSPdqyflkq/50Lbh8ikdqY0q3xaqTqs7FQJdS8Y0iDvLf3RV1VMXUZp7+OG3LwqrfId1EYrnkgDN/cvy+4+YiiKILkknn6jXhhnKcSf5f1eNq/ZB8GQtbJ+wMHy082xNtWKZ5CLuS7nxpC47RWIncH5VY0kyjshaEW5WQ/1S8bdjU/+nZCXywPBLW7LeZUzGEvqIlL19jehf4LmMKn+ZRyBHrSeezQEY9WxwE8cg36eefu7n8vABhPbn6tOHpJcoN+QeWK4oLdkp2oDNUPsPwKCAQEAw3shrNt7pdIpRgBgnHQ2zpBjMbVhWRqCxCdobyxpUAK4VWY2IPY0c0LtHsA7l7P54Xnl3f20V0oJ0D+aNIhaVeAv61Es86VkV8vT7qV061JTM1U5d/+bsWBl7+Bis4NsN9Cvs3819IAMsWmxfm7aicH5PmIVxmbqIG7X6tsCzj2AedfFceO4owIkblhnf7CubuyHGjnTpiUylb2/2Jv3F/aoONvEK2Aa1Cx6ZEzszp72s3QUcQbJShVe1vlYDfzoKmZLj+VbZcdQge/39vDZbuvuEFMqZ037UZXsZAA/v6RgtpRSNQgCRvCZO0hcpFdWzV83RoN8quegUKJRLxAajwKCAQEA/ZTDnx79fClrE7MphNWYO/fTltR+l+OZKOFdmp118qJVx/lyjEtcn2MCLofpG/pSwB2GR77c5LJqJkGjpsIBQ6ZLp5JA0l5U0g6VwSuQt4W/5Tl3WVTEZ9WcCkcxqLR0LcCoSVK8in/iyVkO1hYQeQPCORSn95YiV8Vc/CKe3Uldgj89ZLvLHgcDENhwghyo0+b8i1IB6CIYNTk+PUyEI4IBkzDezDg3zSO8M7RqQJZrP3FZs2Lhhb1jR/LQuIy1QoZTO91VKZdeRAkZ8zHU6Evtq4rSjPRq8QuUJi12umCzL+LMUzrQzbuHFPk4Dqcs644lyJQ1JlMtYAEcL0OJtwKCAQEAjBOF1AoLFo38iW7ny/Ty+R46Fnq04Va/8bOTgGbAqFbqpDdz/jau6xFAPVLe4RxUqR/ieiq8ufgSBCovZAl5QiQ98k/e+FDCEK+8lDv4BlCd0iD152lAteAv665My/oW6AAgh21WynefoNnuGH1zGFfpNKywkdVZXBhRnLeH0SX9FFJr5+qYeiak2HV85OFEfbP8M+zQHzR0hRzNhnhsnb1gWi4Q6kwZrYSZx5nf70e13G4H395PC0k5Bq7yTEO4Ufmvl9NwpQQoSpQcidWY2YUyuHv/3LriplnaZOZQyBEQRIUQS3QLva3W/8YgrJrxVoUuZNb/1K/aDy3hIupVPQKCAQEAgGP3//LS6TCXVGwcE3OKFqLN8Mo6JnFINNiWahhbhbQHtq5n/vyRMuoQSrrpng7KIxdPy7epY+mpsSD+2QnVVgk2uOtmAp1cWNaloB6MsT74//huoz42C1SuIs4VKJPlVtz619UaPQ2vJ779sguN35e1mO0KdmL/lG0LPWXSBbyFqdKXJQ+oMdXfCYJsxJP6Lv/+0hN9f6jzlM8c4jCBnvDOF1ZhGAlGx4jWW193hKgkOQUNI7Rm9y4CvIUGhMpJZBtavS69VcecJNpu1yFd6Re4iGhLXq7KDq2MHyBZwtf/Ibm1NlbLLb9LD6V3aoPeTI22N65Cktr+WGN3f760VQKCAQBuUMCbB2EAf5xTfp7jdVuiBbs3kX0af4KGy5BnEjlWpIURfIq9RlGtIq0fPAAqvjBv5t1lOg0CefgokQHtT/MI5o2Z6RLLfHvIQETBWZH5Y9kdogitDqq8DOP8JI96LlhlQ7huabFmyhMJdTbWvasn5bRd3YYWkeGB2HkoeCPVyskKpXWqj+MqJUGvxLlhl0ya4dR/B20o11EVg1YG8lJOU8GrbeJeTVTMVyT+/3EwNPu6/ClfXPo4QKw/zGX3Quvjd8cCNqXoHowWTzAxkHdMdc8TIlM1UeOpLxS9ZgmqWxmJez7A4be2hSwkgyDLFmLUm5La2BpcSN600mIieCF6",
+      "KeyType": "4096"
+    },
+    "Certificates": null
+  }
+}
@@ -28,7 +28,7 @@ http:
          - main: api.truckwash.dk

    api-preflight-io:
-      rule: Host(`api.truckwash.io`) && Method(`OPTIONS`)
+      rule: (Host(`api.truckwash.io`) || Host(`localhost`)) && Method(`OPTIONS`)
      entryPoints: [websecure, websecure-staging]
      middlewares: [secure-headers]
      service: noop@internal
@@ -61,7 +61,7 @@ http:
        users:
          - "truckwash:$2y$05$DYcMFqMPgEFWAJQioc.F3.v9ppi9bReAi/aQzoOlWqMyhIysKlDCC"
    dashboard-allow-local:
-      ipWhiteList:
+      ipAllowList:
        sourceRange:
          - 127.0.0.1/32
          - 10.0.0.0/8
@@ -87,6 +87,8 @@ http:
          - "https://staging.truckwash.io"
          - "http://localhost"
          - "https://localhost"
+          - "http://localhost:4433"
+          - "https://localhost:4433"
          - "https://twdev.jeppeb.dk"
          - "http://localhost:5173"
        accessControlAllowMethods:
@@ -104,6 +106,10 @@ http:
      rateLimit:
        average: 100
        burst: 200
+    strip-api-prefix:
+      stripPrefix:
+        prefixes:
+          - "/api"

  services:
    cloud-svc: