[mod] vault
This commit is contained in:
		
							parent
							
								
									97c6bac535
								
							
						
					
					
						commit
						5043d34300
					
				
					 3 changed files with 5 additions and 79 deletions
				
			
		| 
						 | 
				
			
			@ -90,7 +90,7 @@ quodatum.duckdns.org {
 | 
			
		|||
	@warden host warden.quodatum.duckdns.org
 | 
			
		||||
	handle @warden {
 | 
			
		||||
		import auth_quodatum
 | 
			
		||||
		import omv 8882
 | 
			
		||||
		import xu4 8882
 | 
			
		||||
	}
 | 
			
		||||
	
 | 
			
		||||
	@nextcloud host nextcloud.quodatum.duckdns.org
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,56 +0,0 @@
 | 
			
		|||
{$DOMAIN}:443 {
 | 
			
		||||
 | 
			
		||||
  log {
 | 
			
		||||
    level INFO
 | 
			
		||||
 | 
			
		||||
    output file {$LOG_FILE} {
 | 
			
		||||
 | 
			
		||||
      roll_size 10MB
 | 
			
		||||
 | 
			
		||||
      roll_keep 10
 | 
			
		||||
    }
 | 
			
		||||
 | 
			
		||||
  }
 | 
			
		||||
 | 
			
		||||
  # Get a cert by using the ACME HTTP-01 challenge.
 | 
			
		||||
 | 
			
		||||
  tls {$EMAIL}
 | 
			
		||||
  encode gzip
 | 
			
		||||
 | 
			
		||||
  # Headers to improve security.
 | 
			
		||||
 | 
			
		||||
  header {
 | 
			
		||||
 | 
			
		||||
  # Enable HSTS
 | 
			
		||||
 | 
			
		||||
  Strict-Transport-Security "max-age=31536000;"
 | 
			
		||||
 | 
			
		||||
  # Enable cross-site filter (XSS)
 | 
			
		||||
 | 
			
		||||
  X-XSS-Protection "1; mode=block"
 | 
			
		||||
 | 
			
		||||
  # Disallow the site to be rendered within a frame (clickjacking protection)
 | 
			
		||||
 | 
			
		||||
  X-Frame-Options "DENY"
 | 
			
		||||
 | 
			
		||||
  # Prevent search engines from indexing
 | 
			
		||||
 | 
			
		||||
  X-Robots-Tag "none"
 | 
			
		||||
 | 
			
		||||
  # Remove Caddy branding
 | 
			
		||||
 | 
			
		||||
  -Server
 | 
			
		||||
 | 
			
		||||
  }
 | 
			
		||||
 | 
			
		||||
  # Redirect notifications to the WebSocket.
 | 
			
		||||
 | 
			
		||||
  reverse_proxy /notifications/hub vaultwarden:3012
 | 
			
		||||
 | 
			
		||||
  reverse_proxy vaultwarden:80 {
 | 
			
		||||
 | 
			
		||||
       header_up X-Real-IP {remote_host}
 | 
			
		||||
 | 
			
		||||
  }
 | 
			
		||||
 | 
			
		||||
}
 | 
			
		||||
| 
						 | 
				
			
			@ -1,29 +1,11 @@
 | 
			
		|||
version: '3'
 | 
			
		||||
 | 
			
		||||
services:
 | 
			
		||||
 | 
			
		||||
  vaultwarden:
 | 
			
		||||
    image: vaultwarden/server:latest
 | 
			
		||||
    container_name: vaultwarden
 | 
			
		||||
    restart: always
 | 
			
		||||
    environment:
 | 
			
		||||
      - WEBSOCKET_ENABLED=true
 | 
			
		||||
    image: vaultwarden/server:latest
 | 
			
		||||
    restart: unless-stopped
 | 
			
		||||
    volumes:
 | 
			
		||||
      - ./vw-data:/data
 | 
			
		||||
 | 
			
		||||
  caddy:
 | 
			
		||||
    image: caddy:2
 | 
			
		||||
    container_name: vaultcaddy
 | 
			
		||||
    restart: always
 | 
			
		||||
      - ./data/:/data/
 | 
			
		||||
    ports:
 | 
			
		||||
      - 84:80
 | 
			
		||||
      - 444:443
 | 
			
		||||
    volumes:
 | 
			
		||||
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
 | 
			
		||||
      - ./caddy-config:/config
 | 
			
		||||
      - ./caddy-data:/data
 | 
			
		||||
    environment:
 | 
			
		||||
      - DOMAIN=https://vault.quodatum.duckdns.org
 | 
			
		||||
      - EMAIL=bunce.andy@gmail.com
 | 
			
		||||
      - LOG_FILE=/data/access.log
 | 
			
		||||
 | 
			
		||||
      - 8882:80
 | 
			
		||||
		Loading…
	
	Add table
		
		Reference in a new issue