Initial commit

traefik/tls.yaml

@@ -0,0 +1,28 @@
+http:
+  middlewares:
+    redir:
+      redirectScheme:
+        scheme: https
+        permanent: true
+    auth:
+      forwardAuth:
+        address: http://authelia:9091/api/verify?rd=https://auth.{{ env "PRIVATE_DOMAIN" }}/%23/
+        trustForwardHeader: true
+        authResponseHeaders:
+          - X-Forwarded-User
+        insecureSkipVerify: true
+
+  services:
+    hass:
+      loadBalancer:
+        servers:
+          - url: http://192.168.0.10:8123
+
+  routers:
+    hass:
+      service: hass
+      rule: Host(`avagen.{{ env "PRIVATE_DOMAIN" }}`)
+      middleware: redir
+      tls:
+        certResolver: le
+

traefik/traefik.yaml

@@ -0,0 +1,26 @@
+api:
+  insecure: true
+
+providers:
+  file:
+    filename: /data/tls.yaml
+  docker:
+    exposedByDefault: false
+
+log:
+  filePath: /data/traefik.log
+  level: DEBUG
+
+entryPoints:
+  web:
+    address: :80
+  websecure:
+    address: :443
+
+certificatesResolvers:
+  le:
+    acme:
+      email: '{{ env "EMAIL" }}'
+      storage: /data/acme.json
+      httpChallenge:
+        entrypoint: web