85 lines
1.5 KiB
Django/Jinja
85 lines
1.5 KiB
Django/Jinja
(cloudflare) {
|
|
tls {
|
|
dns cloudflare {{ opnsense_caddy_cloudflare_api_token }}
|
|
resolvers 1.1.1.1
|
|
}
|
|
}
|
|
|
|
(headers) {
|
|
header {
|
|
Permissions-Policy interest-cohort=()
|
|
Strict-Transport-Security "max-age=31536000; includeSubdomains"
|
|
X-XSS-Protection "1; mode=block"
|
|
X-Content-Type-Options "nosniff"
|
|
X-Robots-Tag noindex, nofollow
|
|
Referrer-Policy "same-origin"
|
|
Content-Security-Policy "frame-ancestors {{ domain_base }} *.{{ domain_base }}"
|
|
-Server
|
|
Permissions-Policy "geolocation=(self {{ domain_base }} *.{{ domain_base }}), microphone=()"
|
|
}
|
|
}
|
|
|
|
## core
|
|
|
|
#neo
|
|
neo.{{ domain_base }} {
|
|
reverse_proxy https://10.56.0.1:8006 {
|
|
transport http {
|
|
tls_insecure_skip_verify
|
|
}
|
|
}
|
|
import cloudflare
|
|
}
|
|
|
|
# pihole
|
|
dns.{{ domain_base }} {
|
|
redir / /admin
|
|
reverse_proxy http://10.56.0.253
|
|
import cloudflare
|
|
}
|
|
|
|
# # dhcp
|
|
# dhcp.{{ domain_base }} {
|
|
# redir / /dhcp.leases
|
|
# reverse_proxy http://10.56.0.253:81
|
|
# import cloudflare
|
|
# }
|
|
|
|
# opnsense
|
|
opnsense.{{ domain_base }} {
|
|
reverse_proxy https://10.56.0.254:8443 {
|
|
transport http {
|
|
tls_insecure_skip_verify
|
|
}
|
|
}
|
|
import cloudflare
|
|
}
|
|
|
|
# pain ipmi
|
|
ipmi.{{ domain_base }} {
|
|
reverse_proxy https://10.56.0.20 {
|
|
transport http {
|
|
tls_insecure_skip_verify
|
|
}
|
|
}
|
|
import cloudflare
|
|
}
|
|
|
|
## pikvm
|
|
#kvm.{{ domain_base }} {
|
|
# reverse_proxy https://10.56.0.100:443 {
|
|
# transport http {
|
|
# tls_insecure_skip_verify
|
|
# }
|
|
# }
|
|
# import cloudflare
|
|
#}
|
|
|
|
# uptime-kuma
|
|
kuma.{{ domain_base }} {
|
|
reverse_proxy http://10.56.0.247:3001
|
|
import cloudflare
|
|
}
|
|
|
|
|