willemjan
43fdc020f4
ipAllowList middleware (192.168.0.0/16) on the websecure routers blocks external access; separate IngressRoute on web 301-redirects http->https. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <[email protected]>
24 lines
515 B
YAML
24 lines
515 B
YAML
# Middlewares voor argocd.labzand.com (alleen intern):
|
|
# - redirect-https: http (web) -> https
|
|
# - lan-only: blokkeert verkeer van buiten het LAN op de websecure-router
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: redirect-https
|
|
namespace: argocd
|
|
spec:
|
|
redirectScheme:
|
|
scheme: https
|
|
permanent: true
|
|
---
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: lan-only
|
|
namespace: argocd
|
|
spec:
|
|
ipAllowList:
|
|
sourceRange:
|
|
- 192.168.0.0/16
|
|
- 127.0.0.1/32
|