Mirrors/continuwuity
1
0
Fork 0
mirror of https://forgejo.ellis.link/continuwuation/continuwuity.git synced 2026-05-26 20:49:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Set up homepaged, improved TLS and tried to get IPv6 functional

Browse Source
This commit is contained in:
Jade Ellis
2024-03-07 19:17:16 +00:00
parent ee705b2c34
commit bfd7f5bd3f
10 changed files with 98 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/traefik/config.toml
+37 -6
View File
@@ -8,6 +8,31 @@ exposedbydefault = false
address = ":80"
[entrypoints.https]
address = ":443"
[entrypoints.https.http3]
[entryPoints.http.proxyProtocol]
insecure = false
trustedIPs = [ ]
[entryPoints.http.forwardedHeaders]
insecure = false
trustedIPs = [ ]
[entryPoints.https.proxyProtocol]
insecure = false
trustedIPs = [ ]
[entryPoints.https.forwardedHeaders]
insecure = false
trustedIPs = [ ]
[entrypoints.http.http.redirections.entryPoint]
to="https"
scheme = "https"
# [entryPoints.traefik]
# address = ":9000"
[certificatesresolvers.letsencrypt.acme]
email = 'jade@ellis.link'
@@ -16,10 +41,16 @@ storage = "/certificates/acme.json"
# - "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
# - "--certificatesresolvers.letsencrypt.acme.httpChallenge.entryPoint=http"
tlschallenge = true
[tls.options.modern]
minVersion = "VersionTLS13"
[entrypoints.http.http.redirections.entryPoint]
to="https"
scheme = "https"
[entryPoints.traefik]
address = ":9000"
[tls.options.intermediate]
minVersion = "VersionTLS12"
cipherSuites = [
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"
]