Files
hobbs-iac/compose/hf-pdocker-02/traefik/dynamic-routes.yml
jeremy 27f6d95bf6 chore: sync accumulated infra changes and docs
Removals: openwebui and netclaw compose + Traefik routes (both decommissioned).
Updates: litellm, n8n, vaultwarden, ai-agents, media, traefik routes, CLAUDE.md
(nodes/ports/known-issues), agent definitions.
Additions: Rongorongo tree, LinkedStorm plan, rename-bart spec, vllm brief,
tls-options and security-headers Traefik config.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-11 11:19:21 -05:00

133 lines
3.0 KiB
YAML

http:
routers:
yoda:
rule: "Host(`yoda.hobbs.farm`)"
service: yoda
entryPoints:
- websecure
middlewares:
- security-headers-allow-frames
tls:
certResolver: letsencrypt
mess:
rule: "Host(`mess.hobbs.farm`)"
service: mess
entryPoints:
- websecure
middlewares:
- security-headers
tls:
certResolver: letsencrypt
mess-federation:
rule: "Host(`mess.hobbs.farm`) && PathPrefix(`/_matrix/federation`)"
service: mess
entryPoints:
- websecure
middlewares:
- security-headers
tls:
certResolver: letsencrypt
wellknown:
rule: "Host(`hobbs.farm`) && PathPrefix(`/.well-known/matrix`)"
service: wellknown
entryPoints:
- websecure
middlewares:
- security-headers
tls:
certResolver: letsencrypt
solo:
rule: "Host(`solo.hobbs.farm`)"
service: solo
entryPoints:
- websecure
middlewares:
- security-headers-allow-frames
tls:
certResolver: letsencrypt
vault:
rule: "Host(`vault.hobbs.farm`)"
service: vault
entryPoints:
- websecure
middlewares:
- security-headers
tls:
certResolver: letsencrypt
git:
rule: "Host(`git.hobbs.farm`)"
service: git
entryPoints:
- websecure
middlewares:
- security-headers
tls:
certResolver: letsencrypt
middlewares:
security-headers:
headers:
stsSeconds: 31536000
stsIncludeSubdomains: true
stsPreload: true
contentTypeNosniff: true
frameDeny: true
referrerPolicy: "strict-origin-when-cross-origin"
permissionsPolicy: "camera=(), microphone=(), geolocation=(), payment=()"
browserXssFilter: true
customResponseHeaders:
X-Powered-By: ""
Server: ""
security-headers-allow-frames:
headers:
stsSeconds: 31536000
stsIncludeSubdomains: true
stsPreload: true
contentTypeNosniff: true
frameDeny: false
customFrameOptionsValue: "SAMEORIGIN"
referrerPolicy: "strict-origin-when-cross-origin"
permissionsPolicy: "camera=(), microphone=(), geolocation=(), payment=()"
browserXssFilter: true
customResponseHeaders:
X-Powered-By: ""
Server: ""
services:
yoda:
loadBalancer:
servers:
- url: "http://192.168.86.167:8123"
mess:
loadBalancer:
servers:
- url: "http://192.168.86.167:8008"
wellknown:
loadBalancer:
servers:
- url: "http://192.168.86.167:8010"
solo:
loadBalancer:
servers:
- url: "http://192.168.86.167:8199"
vault:
loadBalancer:
servers:
- url: "http://192.168.86.100:26226"
git:
loadBalancer:
servers:
- url: "http://192.168.86.100:3003"