[mod] vault

This commit is contained in:
Andy Bunce 2023-06-13 14:55:48 +01:00
parent 97c6bac535
commit 5043d34300
3 changed files with 5 additions and 79 deletions

View File

@ -90,7 +90,7 @@ quodatum.duckdns.org {
@warden host warden.quodatum.duckdns.org @warden host warden.quodatum.duckdns.org
handle @warden { handle @warden {
import auth_quodatum import auth_quodatum
import omv 8882 import xu4 8882
} }
@nextcloud host nextcloud.quodatum.duckdns.org @nextcloud host nextcloud.quodatum.duckdns.org

View File

@ -1,56 +0,0 @@
{$DOMAIN}:443 {
log {
level INFO
output file {$LOG_FILE} {
roll_size 10MB
roll_keep 10
}
}
# Get a cert by using the ACME HTTP-01 challenge.
tls {$EMAIL}
encode gzip
# Headers to improve security.
header {
# Enable HSTS
Strict-Transport-Security "max-age=31536000;"
# Enable cross-site filter (XSS)
X-XSS-Protection "1; mode=block"
# Disallow the site to be rendered within a frame (clickjacking protection)
X-Frame-Options "DENY"
# Prevent search engines from indexing
X-Robots-Tag "none"
# Remove Caddy branding
-Server
}
# Redirect notifications to the WebSocket.
reverse_proxy /notifications/hub vaultwarden:3012
reverse_proxy vaultwarden:80 {
header_up X-Real-IP {remote_host}
}
}

View File

@ -1,29 +1,11 @@
version: '3' version: '3'
services: services:
vaultwarden: vaultwarden:
image: vaultwarden/server:latest
container_name: vaultwarden container_name: vaultwarden
restart: always image: vaultwarden/server:latest
environment: restart: unless-stopped
- WEBSOCKET_ENABLED=true
volumes: volumes:
- ./vw-data:/data - ./data/:/data/
caddy:
image: caddy:2
container_name: vaultcaddy
restart: always
ports: ports:
- 84:80 - 8882:80
- 444:443
volumes:
- ./Caddyfile:/etc/caddy/Caddyfile:ro
- ./caddy-config:/config
- ./caddy-data:/data
environment:
- DOMAIN=https://vault.quodatum.duckdns.org
- EMAIL=bunce.andy@gmail.com
- LOG_FILE=/data/access.log