updated frigate, home-assistant and traefik

frigate/compose.yaml

@@ -23,11 +23,11 @@ services:
           size: 1000000000
       - /certs:/certs
     ports:
-      - 5000:5000
+      - 5000:5000      # insecure/open, no login
       - 8554:8554
       - 8555:8555/tcp
       - 8555:8555/udp
-      - 8971:8971
+      - 8971:8971      # secure login
     environment:
       PUID: 1001
       PGID: 10002

home-assistant/compose.yaml

@@ -22,8 +22,8 @@ services:
     #     - /run/dbus:/run/dbus:ro
     restart: unless-stopped
     env_file: .home-assistant.env
-  #  ports:
-  #    - 8123:8123
+    #ports:
+    #  - 8123:8123
     networks:
       traefik-net: null
       postgres-net: null
@@ -37,11 +37,11 @@ services:
       - traefik.docker.network=traefik-net
       - traefik.http.services.${APPLICATION_NAME}-svc.loadbalancer.server.port=${WEBUI_PORT}
       - traefik.http.routers.${APPLICATION_NAME}-rtr.entrypoints=web
-      - traefik.http.routers.${APPLICATION_NAME}-rtr.rule=Host(`${WEBAPP_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`) || Host(`${WEBAPP_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`)
+      - traefik.http.routers.${APPLICATION_NAME}-rtr.rule=Host(`${WEBAPP_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`) || Host(`${APPLICATION_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`)
       - traefik.http.routers.${APPLICATION_NAME}-rtr.middlewares=http-mw-secureHeaders-redirect@file
       - traefik.http.routers.${APPLICATION_NAME}-rtr.service=${APPLICATION_NAME}-svc
       - traefik.http.routers.${APPLICATION_NAME}-secure-rtr.entrypoints=websecure
-      - traefik.http.routers.${APPLICATION_NAME}-secure-rtr.rule=Host(`${WEBAPP_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`) || Host(`${WEBAPP_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`)
+      - traefik.http.routers.${APPLICATION_NAME}-secure-rtr.rule=Host(`${WEBAPP_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`) || Host(`${APPLICATION_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`)
       - traefik.http.routers.${APPLICATION_NAME}-secure-rtr.middlewares=http-mw-secureHeaders@file
       - traefik.http.routers.${APPLICATION_NAME}-secure-rtr.tls=true
       - traefik.http.routers.${APPLICATION_NAME}-secure-rtr.tls.options=tls-options@file

traefik/.env

@@ -19,3 +19,5 @@ PUID=3012
 PGID=3011
 TZ=Africa/Johannesburg
 
+PING_PORT=8083
+WEBAPP_PING=traefik-ping

traefik/compose.yaml

@@ -56,7 +56,7 @@ services:
         app_protocol: http
         mode: host
 
-#      - name: "traefik"   # dashboard port - use when not using labels below
+#      - name: "traefik"   # dashboard port - use when not using labels below / reverse proxy for traefik itself
 #        target: 8080
 #        host_ip: 0.0.0.0
 #        published: "8080"
@@ -117,6 +117,10 @@ services:
       #
       # http routers
       # ------------
+      # http://traefik-px.sthome.org/ping
+      - traefik.http.routers.${APPLICATION_NAME}-ping-rtr.entrypoints=web
+      - traefik.http.routers.${APPLICATION_NAME}-ping-rtr.rule=Host(`${WEBAPP_PING}.${DOMAINNAME}`)&& PathPrefix(`/`)
+
       - traefik.http.routers.${APPLICATION_NAME}-rtr.entrypoints=web
       - traefik.http.routers.${APPLICATION_NAME}-rtr.rule=Host(`${WEBAPP_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`) || Host(`${APPLICATION_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`)
       # https://appname.domainname/
@@ -139,6 +143,10 @@ services:
       #
       # http services
       # -------------
+      - traefik.http.services.${APPLICATION_NAME}-ping-svc.loadbalancer.server.port=${PING_PORT}
+
+      # assign services to routers
+      - traefik.http.routers.${APPLICATION_NAME}-ping-rtr.service=${APPLICATION_NAME}-ping-svc
       - traefik.http.routers.${APPLICATION_NAME}-rtr.service=api@internal
       - traefik.http.routers.${APPLICATION_NAME}-secure-rtr.service=api@internal
   ###############################################################

traefik/config/traefik.yml

@@ -20,6 +20,10 @@ entryPoints:
 #        entrypoint:
 #          to: websecure
 #          scheme: https
+    forwardedHeaders:
+      trustedIPs:
+        # Local IPs
+        - "10.0.0.20/20"
 
   websecure:
     address: ":443"