• 0 Posts
  • 45 Comments
Joined 2 years ago
cake
Cake day: June 10th, 2023

help-circle




  • I can share my traefik setup - note I am doing this on my phone at work, so I might miss something

    compose.yaml
    
        labels:
          - "traefik.enable=true"
          - "traefik.http.routers.traefik.middlewares=authwares@file"
    
      GNU nano 7.2                      /config/traefik/dynamic/middlewares.yaml
    http:
      middlewares:
    
        limit:
          buffering:
            memRequestBodyBytes: 5000000000
            memResponseBodyBytes: 5000000000
            maxRequestBodyBytes: 5000000000
            maxResponseBodyBytes: 5000000000
    
        authwares:
          chain:
            middlewares:
              - default-headers
              - authelia
              - limit
    
        default-headers:
          headers:
            accessControlAllowHeaders: "content-type,authorization"
            accessControlAllowMethods:
              - GET
              - OPTIONS
              - PUT
              - POST
              - DELETE
            frameDeny: true
            accessControlAllowOriginList: "*"
            accessControlMaxAge: 100
            addVaryHeader: true
            browserXssFilter: true
            contentTypeNosniff: true
            forceSTSHeader: true
            stsIncludeSubdomains: true
            stsPreload: true
            stsSeconds: 15552000
            customFrameOptionsValue: SAMEORIGIN
            referrerPolicy: "strict-origin-when-cross-origin"
            customRequestHeaders:
              X-Forwarded-Proto: https
            customResponseHeaders:
              X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex"
              server: ""
              X-Forwarded-Proto: "https,wss"
            hostsProxyHeaders:
              - "X-Forwarded-Host"
    
        authelia:
          forwardAuth:
            address: http://auth/api/verify?rd=https%3A%2F%2Fauth.example.com%2F
            trustForwardHeader: true
            authResponseHeaders:
              - "Remote-User"
              - "Remote-Groups"
              - "Remote-Email"
              - "Remote-Name"
    
      GNU nano 7.2                            /config/traefik/traefik.yaml
    global:
      checkNewVersion: false
      sendAnonymousUsage: false
    
    entryPoints:
      web:
        address: :80
        proxyProtocol:
          insecure: false
          trustedIPs:
            - 172.32.0.0/16
            - 192.168.1.0/24
        forwardedHeaders:
          insecure: false
          trustedIPs:
            - 172.32.0.0/16
            - 192.168.1.0/24
        http:
          redirections:
            entryPoint:
              to: websecure
              scheme: https
              permanent: true
      websecure:
        address: :443
        proxyProtocol:
          insecure: false
          trustedIPs:
            - 172.32.0.0/16
            - 192.168.1.0/24
        forwardedHeaders:
          insecure: false
          trustedIPs:
            - 172.32.0.0/16
            - 192.168.1.0/24
        http:
          tls:
            options: modern@file
            certResolver: letsencrypt
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
    
      providers:
      docker:
        exposedByDefault: false
        network: compose_proxied
        allowEmptyServices: true
        endpoint: "http://socket:2375/"
        defaultRule: "Host(`{{ index .Labels \"com.docker.compose.service\"}}.example.com`)"
      file:
        directory: /config/dynamic
        watch: true
    
    api:
      insecure: false
      dashboard: true
    
    certificatesResolvers:
      letsencrypt:
        acme:
          email: acme@example.com
          storage: /certificates/acme.json
          dnsChallenge:
            provider: cloudflare
            resolvers:
              - "1.1.1.1:53"
              - "1.0.0.1:53"
    
    log:
      level: DEBUG
      filePath: /config/logs/traefik.log
      format: json
    accesslog:
      filepath: /config/logs/access.log
      bufferingSize: 100
      format: json
    







  • DarkSirrush@lemmy.catoMicroblog Memes@lemmy.worldMarketing
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 months ago

    It’s probably still cheaper in Sweden than it is in Canada with coverage.

    Between my government coverage and workplace private coverage, I still have to pay $100 for the eye exam, and I am blind enough that I have to be choosy with frames or I go over the 2 year limit on cost for my glasses (lenses alone cost >$200 before I add coatings, and I only have $500/2yr in coverage for frames, lenses and contacts put together).





  • DarkSirrush@lemmy.catocats@lemmy.worldHappy Stomp
    link
    fedilink
    arrow-up
    9
    ·
    2 months ago

    Worse than being AI, this is a newish designer breed called a highland lynx, and the polydactyl, curled ear tips, and manx tail are traits they are breeding for.

    Unfortunately, its not very ethical to breed for these traits, especially the manx tail, which can cause cats to be born incontinent.