[mod] vault
This commit is contained in:
parent
97c6bac535
commit
5043d34300
@ -90,7 +90,7 @@ quodatum.duckdns.org {
|
|||||||
@warden host warden.quodatum.duckdns.org
|
@warden host warden.quodatum.duckdns.org
|
||||||
handle @warden {
|
handle @warden {
|
||||||
import auth_quodatum
|
import auth_quodatum
|
||||||
import omv 8882
|
import xu4 8882
|
||||||
}
|
}
|
||||||
|
|
||||||
@nextcloud host nextcloud.quodatum.duckdns.org
|
@nextcloud host nextcloud.quodatum.duckdns.org
|
||||||
|
@ -1,56 +0,0 @@
|
|||||||
{$DOMAIN}:443 {
|
|
||||||
|
|
||||||
log {
|
|
||||||
level INFO
|
|
||||||
|
|
||||||
output file {$LOG_FILE} {
|
|
||||||
|
|
||||||
roll_size 10MB
|
|
||||||
|
|
||||||
roll_keep 10
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
# Get a cert by using the ACME HTTP-01 challenge.
|
|
||||||
|
|
||||||
tls {$EMAIL}
|
|
||||||
encode gzip
|
|
||||||
|
|
||||||
# Headers to improve security.
|
|
||||||
|
|
||||||
header {
|
|
||||||
|
|
||||||
# Enable HSTS
|
|
||||||
|
|
||||||
Strict-Transport-Security "max-age=31536000;"
|
|
||||||
|
|
||||||
# Enable cross-site filter (XSS)
|
|
||||||
|
|
||||||
X-XSS-Protection "1; mode=block"
|
|
||||||
|
|
||||||
# Disallow the site to be rendered within a frame (clickjacking protection)
|
|
||||||
|
|
||||||
X-Frame-Options "DENY"
|
|
||||||
|
|
||||||
# Prevent search engines from indexing
|
|
||||||
|
|
||||||
X-Robots-Tag "none"
|
|
||||||
|
|
||||||
# Remove Caddy branding
|
|
||||||
|
|
||||||
-Server
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
# Redirect notifications to the WebSocket.
|
|
||||||
|
|
||||||
reverse_proxy /notifications/hub vaultwarden:3012
|
|
||||||
|
|
||||||
reverse_proxy vaultwarden:80 {
|
|
||||||
|
|
||||||
header_up X-Real-IP {remote_host}
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
@ -1,29 +1,11 @@
|
|||||||
version: '3'
|
version: '3'
|
||||||
|
|
||||||
services:
|
services:
|
||||||
|
|
||||||
vaultwarden:
|
vaultwarden:
|
||||||
image: vaultwarden/server:latest
|
|
||||||
container_name: vaultwarden
|
container_name: vaultwarden
|
||||||
restart: always
|
image: vaultwarden/server:latest
|
||||||
environment:
|
restart: unless-stopped
|
||||||
- WEBSOCKET_ENABLED=true
|
|
||||||
volumes:
|
volumes:
|
||||||
- ./vw-data:/data
|
- ./data/:/data/
|
||||||
|
|
||||||
caddy:
|
|
||||||
image: caddy:2
|
|
||||||
container_name: vaultcaddy
|
|
||||||
restart: always
|
|
||||||
ports:
|
ports:
|
||||||
- 84:80
|
- 8882:80
|
||||||
- 444:443
|
|
||||||
volumes:
|
|
||||||
- ./Caddyfile:/etc/caddy/Caddyfile:ro
|
|
||||||
- ./caddy-config:/config
|
|
||||||
- ./caddy-data:/data
|
|
||||||
environment:
|
|
||||||
- DOMAIN=https://vault.quodatum.duckdns.org
|
|
||||||
- EMAIL=bunce.andy@gmail.com
|
|
||||||
- LOG_FILE=/data/access.log
|
|
||||||
|
|
Loading…
Reference in New Issue
Block a user