refactor traefik middlewares into separate files

Signed-off-by: Robert Günzler <r@gnzler.io>

1 files changed, 30 insertions, 0 deletions

diff --git a/bundles/traefik/files/common-middlewares.yaml b/bundles/traefik/files/common-middlewares.yaml
new file mode 100644
index 0000000..5f2cb2e
--- /dev/null
+++ b/bundles/traefik/files/common-middlewares.yaml
@@ -0,0 +1,30 @@
+http:
+  middlewares:
+
+    # metrics
+    replacepath-bare:
+      replacepath:
+        path: /
+    replacepath-metrics:
+      replacepath:
+        path: /metrics
+
+    # authelia
+    authelia:
+      forwardAuth:
+        trustForwardHeader: true
+        authResponseHeaders: Remote-User,Remote-Groups,Remote-Email,Remote-Name
+% if node.name == "inazuma":
+        address: http://authelia:9091/api/authz/forward-auth
+% elif node.name == "shimakaze":
+        address: http://inazuma:9091/api/authz/forward-auth
+% endif
+
+% if node.name == "inazuma--TODO":
+    # tsauth
+    tsauth:
+      forwardAuth:
+        trustForwardHeader: true
+        authResponseHeaders: ^Tailscale-
+        address: http://localhost:3000
+% endif