mirror of
https://github.com/yusing/godoxy.git
synced 2025-05-20 12:42:34 +02:00
136 lines
3.6 KiB
YAML
136 lines
3.6 KiB
YAML
# Autocert (choose one below and uncomment to enable)
|
|
#
|
|
# 1. use existing cert
|
|
#
|
|
# autocert:
|
|
# provider: local
|
|
#
|
|
# cert_path: certs/cert.crt # optional, uncomment only if you need to change it
|
|
# key_path: certs/priv.key # optional, uncomment only if you need to change it
|
|
#
|
|
# 2. cloudflare
|
|
#
|
|
# autocert:
|
|
# provider: cloudflare
|
|
# email: abc@gmail.com # ACME Email
|
|
# domains: # a list of domains for cert registration
|
|
# - "*.y.z" # remember to use double quotes to surround wildcard domain
|
|
# options:
|
|
# auth_token: c1234565789-abcdefghijklmnopqrst # your zone API token
|
|
#
|
|
# 3. other providers, check docs/dns_providers.md for more
|
|
|
|
entrypoint:
|
|
middlewares:
|
|
- use: CIDRWhitelist
|
|
allow:
|
|
- "127.0.0.1"
|
|
- "10.0.0.0/8"
|
|
- "192.168.0.0/16"
|
|
status: 403
|
|
message: "Forbidden"
|
|
- use: RedirectHTTP
|
|
# access_log:
|
|
# buffer_size: 1024
|
|
# path: /var/log/example.log
|
|
# filters:
|
|
# status_codes:
|
|
# values:
|
|
# - 200-299
|
|
# - 101
|
|
# method:
|
|
# values:
|
|
# - GET
|
|
# host:
|
|
# values:
|
|
# - example.y.z
|
|
# headers:
|
|
# negative: true
|
|
# values:
|
|
# - foo=bar
|
|
# - baz
|
|
# cidr:
|
|
# values:
|
|
# - 192.168.10.0/24
|
|
# fields:
|
|
# headers:
|
|
# default: keep
|
|
# config:
|
|
# foo: redact
|
|
# query:
|
|
# default: drop
|
|
# config:
|
|
# foo: keep
|
|
# cookies:
|
|
# default: redact
|
|
# config:
|
|
# foo: keep
|
|
|
|
providers:
|
|
# include files are standalone yaml files under `config/` directory
|
|
#
|
|
# include:
|
|
# - file1.yml
|
|
# - file2.yml
|
|
|
|
docker:
|
|
# $DOCKER_HOST implies environment variable `DOCKER_HOST` or unix:///var/run/docker.sock by default
|
|
local: $DOCKER_HOST
|
|
# explicit only mode
|
|
# only containers with explicit aliases will be proxied
|
|
# add "!" after provider name to enable explicit only mode
|
|
#
|
|
# local!: $DOCKER_HOST
|
|
#
|
|
# add more docker providers if needed
|
|
# for value format, see https://docs.docker.com/reference/cli/dockerd/
|
|
#
|
|
# remote-1: tcp://10.0.2.1:2375
|
|
# remote-2: ssh://root:1234@10.0.2.2
|
|
|
|
# notification providers (notify when service health changes)
|
|
#
|
|
# notification:
|
|
# - name: gotify
|
|
# provider: gotify
|
|
# url: https://gotify.domain.tld
|
|
# token: abcd
|
|
# - name: discord
|
|
# provider: webhook
|
|
# url: https://discord.com/api/webhooks/...
|
|
# template: discord
|
|
# # payload: | # discord template implies the following
|
|
# # {
|
|
# # "embeds": [
|
|
# # {
|
|
# # "title": $title,
|
|
# # "fields": $fields,
|
|
# # "color": "$color"
|
|
# # }
|
|
# # ]
|
|
# # }
|
|
# if match_domains not defined
|
|
# any host = alias+[any domain] will match
|
|
# i.e. https://app1.y.z will match alias app1 for any domain y.z
|
|
# but https://app1.node1.y.z will only match alias "app.node1"
|
|
#
|
|
# if match_domains defined
|
|
# only host = alias+[one of match_domains] will match
|
|
# i.e. match_domains = [node1.my.app, my.site]
|
|
# https://app1.my.app, https://app1.my.net, etc. will not match even if app1 exists
|
|
# only https://*.node1.my.app and https://*.my.site will match
|
|
#
|
|
#
|
|
# match_domains:
|
|
# - my.site
|
|
# - node1.my.app
|
|
|
|
# homepage config
|
|
homepage:
|
|
# use default app categories detected from alias or docker image name
|
|
use_default_categories: true
|
|
|
|
# Below are fixed options (non hot-reloadable)
|
|
|
|
# timeout for shutdown (in seconds)
|
|
timeout_shutdown: 5
|