intitial

deploy/valtrix-web.contaier

@@ -0,0 +1,35 @@
+[Unit]
+Description=Valtrix Web
+
+[Container]
+Image=localhost/valtrix-web
+ContainerName=valtrix-web
+Network=edge
+AutoUpdate=registry
+Environment=TZ=Europe/Berlin
+
+#Traefik Labels
+Label="traefik.enable=true"
+Label="traefik.http.routers.valtrix-web.rule=Host(`web.valtrix.systems`)"
+Label="traefik.http.services.valtrix-web.loadbalancer.server.port=3010"
+Label="traefik.http.routers.valtrix-web.entrypoints=websecure"
+Label="traefik.http.routers.valtrix-web.tls=true"
+Label="traefik.http.routers.valtrix-web.tls.certresolver=le"
+
+Label="traefik.http.routers.valtrix-web-http.rule=Host(`web.valtrix.systems`)"
+Label="traefik.http.routers.valtrix-web-http.entrypoints=web"
+Label="traefik.http.routers.valtrix-web-http.middlewares=valtrix-web-redirect"
+Label="traefik.http.middlewares.valtrix-web-redirect.redirectscheme.scheme=https"
+Label="traefik.http.middlewares.valtrix-web-redirect.redirectscheme.permanent=true"
+Label="traefik.http.routers.valtrix-web.middlewares=secure-headers@file"
+
+Label="traefik.http.middlewares.valtrix-web-sec.headers.customResponseHeaders.Content-Security-Policy=default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'; script-src-elem 'self' 'unsafe-inline'; connect-src 'self' wss: https:; font-src 'self' data:; worker-src 'self' blob:;"
+Label="traefik.http.routers.valtrix-web.middlewares=valtrix-web-sec@docker"
+Label="traefik.http.routers.valtrix-web.middlewares=auth"
+Label="traefik.http.middlewares.auth.basicauth.users=smb:$apr1$H6uskkkW$IgXLP6ewTrSuBkTrqE8wj/"
+
+[Service]
+Restart=on-failure
+
+[Install]
+WantedBy=default.target