Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
| Beide Seiten der vorigen Revision Vorhergehende Überarbeitung Nächste Überarbeitung | Vorhergehende Überarbeitung | ||
|
projekte:docker:container:pihole:start [2022/12/07 17:12] admin |
projekte:docker:container:pihole:start [2022/12/07 17:21] (aktuell) admin |
||
|---|---|---|---|
| Zeile 9: | Zeile 9: | ||
| version: " | version: " | ||
| - | # More info at https:// | ||
| services: | services: | ||
| pihole: | pihole: | ||
| Zeile 24: | Zeile 23: | ||
| DNSSEC: ' | DNSSEC: ' | ||
| ServerIP: 0.0.0.0 # Actual server IP. Matches DHCP conf file IP | ServerIP: 0.0.0.0 # Actual server IP. Matches DHCP conf file IP | ||
| - | VIRTUAL_HOST: | + | VIRTUAL_HOST: |
| DNSMASQ_LISTENING: | DNSMASQ_LISTENING: | ||
| WEBTHEME: default-dark | WEBTHEME: default-dark | ||
| Zeile 42: | Zeile 41: | ||
| - traefik.enable=true | - traefik.enable=true | ||
| - traefik.docker.network=traefik_proxy | - traefik.docker.network=traefik_proxy | ||
| - | - traefik.http.routers.pihole.rule=Host(`pihole.net17.porz`) | + | - traefik.http.routers.pihole.rule=Host(`pihole.beispiel.domain`) |
| - traefik.http.routers.pihole.entrypoints=https | - traefik.http.routers.pihole.entrypoints=https | ||
| - traefik.http.routers.pihole.tls=true | - traefik.http.routers.pihole.tls=true | ||
| Zeile 52: | Zeile 51: | ||
| </ | </ | ||
| - | ===== Apache Konfiguration | + | ===== traefik Ergaenzung |
| + | In traefik muss in der dynamic_conf.yml Konfiguration folgendes ergaenzt werden: | ||
| < | < | ||
| + | http: | ||
| + | middlewares: | ||
| + | secHeaders: | ||
| + | headers: | ||
| + | browserXssFilter: | ||
| + | contentTypeNosniff: | ||
| + | frameDeny: true | ||
| + | sslRedirect: | ||
| + | #HSTS Configuration | ||
| + | stsIncludeSubdomains: | ||
| + | stsPreload: true | ||
| + | stsSeconds: 31536000 | ||
| + | customFrameOptionsValue: | ||
| + | services: | ||
| + | srv82: | ||
| + | weighted: | ||
| + | healthCheck: | ||
| + | services: | ||
| + | - name: pihole1 | ||
| + | weight: 2 | ||
| + | - name: pihole2 | ||
| + | weight: 1 | ||
| + | pihole1: | ||
| + | loadBalancer: | ||
| + | healthCheck: | ||
| + | path: /admin | ||
| + | interval: 10s | ||
| + | timeout: 3s | ||
| + | servers: | ||
| + | - url: " | ||
| + | |||
| + | pihole2: | ||
| + | loadBalancer: | ||
| + | healthCheck: | ||
| + | path: /admin | ||
| + | interval: 10s | ||
| + | timeout: 3s | ||
| + | servers: | ||
| + | - url: " | ||
| </ | </ | ||
| + | Dies erzeugt einen Loadbalancer der prueft ob Pihole auf dockerman1 oder 2 laeuft und leitet Anfragen dann da hin. | ||