eightball/all-in-one
1
0
Fork 0
mirror of https://github.com/nextcloud/all-in-one.git synced 2025-12-20 06:26:57 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

Merge pull request #592 from nextcloud/enh/543/treafik

Browse source 
improve the traefik reverse proxy documentation
This commit is contained in:
Simon L 2022-05-07 12:24:49 +02:00 • committed by GitHub
commit 199102918e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 42 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

35
reverse-proxy.md
View file

@ -86,10 +86,10 @@ Pull requests are very welcome!
**Disclaimer:** It might be possible that the config below is not working 100% correctly, yet. Improvements to it are very welcome! **Disclaimer:** It might be possible that the config below is not working 100% correctly, yet. Improvements to it are very welcome!
Add a `nc.toml` to the Treafik rules folder with the following content: 1. Add a `nextcloud.toml` to the Treafik rules folder with the following content:
```toml ```toml
[http.routers] [http.routers]
[http.routers.nc-rtr] [http.routers.nc-rtr]
entryPoints = ["https"] entryPoints = ["https"]
rule = "Host(<your-nc-domain>)" rule = "Host(<your-nc-domain>)"
@ -98,13 +98,38 @@ Add a `nc.toml` to the Treafik rules folder with the following content:
[http.routers.nc-rtr.tls] [http.routers.nc-rtr.tls]
certresolver = "le" certresolver = "le"
[http.services] [http.services]
[http.services.nc-svc] [http.services.nc-svc]
[http.services.nc-svc.loadBalancer] [http.services.nc-svc.loadBalancer]
passHostHeader = true passHostHeader = true
[[http.services.nc-svc.loadBalancer.servers]] [[http.services.nc-svc.loadBalancer.servers]]
url = "http://<private.ip.address.of.the.host>:11000" url = "http://<private.ip.address.of.the.host>:11000"
``` ```
2. Add to the bottom of the `middlewares.toml` file in the Treafik rules folder the following content:
```toml
[http.middlewares.nc-middlewares-secure-headers]
[http.middlewares.nc-middlewares-secure-headers.headers]
hostsProxyHeaders = ["X-Forwarded-Host"]
sslRedirect = true
stsSeconds = 63072000
stsIncludeSubdomains = true
stsPreload = true
forceSTSHeader = true
referrerPolicy = "same-origin"
X-Robots-Tag = "none"
```
3. Add to the bottom of the `middleware-chains.toml` file in the Traefik rules folder the following content:
```toml
[http.middlewares.chain-nc]
[http.middlewares.chain-nc.chain]
middlewares = [ "middlewares-rate-limit", "nc-middlewares-secure-headers"]
```
---
Of course you need to modify `<your-nc-domain>` to the domain on which you want to run Nextcloud. You will also need to modify `<private.ip.address.of.the.host>` to the private ip-address of the host that is running the docker daemon. **Advice:** the `nextcloud-aio-mastercontainer` is **NOT** running the docker daemon. The host itself is running the docker daemon. Of course you need to modify `<your-nc-domain>` to the domain on which you want to run Nextcloud. You will also need to modify `<private.ip.address.of.the.host>` to the private ip-address of the host that is running the docker daemon. **Advice:** the `nextcloud-aio-mastercontainer` is **NOT** running the docker daemon. The host itself is running the docker daemon.