Urmel-Ansible-Roles/traefik
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

protect against dns rebinds

Browse Source
This commit is contained in:
Kyattsukuro 2026-01-21 14:37:26 +01:00
parent ff3881428c
commit c558d7b62c
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
compose.yml
View File

@ -33,7 +33,7 @@ services:
traefik.http.routers.traefik-dashboard.tls: "true" traefik.http.routers.traefik-dashboard.tls: "true"
traefik.http.routers.traefik-dashboard.tls.certresolver: hetzner traefik.http.routers.traefik-dashboard.tls.certresolver: hetzner
traefik.http.routers.traefik-dashboard.service: api@internal traefik.http.routers.traefik-dashboard.service: api@internal
traefik.http.routers.traefik-dashboard.middlewares: traefik-auth@file traefik.http.routers.traefik-dashboard.middlewares: traefik-auth@file, local-only@file
volumes: volumes:
traefik-certs: traefik-certs:

8
config/config.yml
View File

@ -37,4 +37,10 @@ http:
redirect-duckdns: redirect-duckdns:
redirectRegex: redirectRegex:
regex: "^http(s?)://(.+\\.)?urmel\\.duckdns\\.org(:[0-9]+)?(/.*$|$)" regex: "^http(s?)://(.+\\.)?urmel\\.duckdns\\.org(:[0-9]+)?(/.*$|$)"
replacement: "http${1}://${2}urmel.de${3}${4}" replacement: "http${1}://${2}urmel.de${3}${4}"
local-only:
ipAllowList:
sourceRange:
- "10.0.0.0/8"
- "172.16.0.0/12"
- "168.168.0.0/16"