diff --git a/templates/traefik-cm.yml.j2 b/templates/traefik-cm.yml.j2 index a4d50ad..240f225 100644 --- a/templates/traefik-cm.yml.j2 +++ b/templates/traefik-cm.yml.j2 @@ -18,6 +18,7 @@ data: # middlewares: # - auth@file # - secure_headers@file + # - crowdsec-bouncer@file redirections: entryPoint: to: websecure @@ -27,6 +28,10 @@ data: http: tls: options: default + # middlewares: + # - auth@file + # - secure_headers@file + # - crowdsec-bouncer@file traefik: address: ":9000/tcp" {% for traefik_entrypoint in traefik_entrypoints %} @@ -56,11 +61,14 @@ data: log: level: WARN format: json - accessLog: - format: json - fields: - names: - BackendAddr: keep - BackendName: keep - BackendURL: keep - FrontendName: keep + accessLog: {} + #accessLog: + # filePath: "/var/log/traefik/access.log" + # bufferingSize: 50 + ## format: json + ## fields: + ## names: + ## BackendAddr: keep + ## BackendName: keep + ## BackendURL: keep + ## FrontendName: keep diff --git a/templates/traefik-files.yml.j2 b/templates/traefik-files.yml.j2 index 71a4b5b..e6f4836 100644 --- a/templates/traefik-files.yml.j2 +++ b/templates/traefik-files.yml.j2 @@ -82,6 +82,10 @@ data: - "Remote-Groups" - "Remote-Name" - "Remote-Email" + crowdsec-bouncer: + forwardAuth: + address: "http://crowdsec-traefik-bouncer:8080/api/v1/forwardAuth + trustForwardHeader: true traefik-tls-defaults-options.yaml: | tls: