feat: route alles unter w-make.com — admin/api ohne Subdomain

- Traefik-Routing: /admin und /v1/* auf updates-api (prioritaet 150/200)
- Portfolio fängt restliches w-make.com ab (prioritaet 100)
- Subdomain updates.w-make.com entfällt
- Admin-HTML: Kicker aktualisiert zu w-make.com
- deploy-vps.sh: updates-api wird jetzt auch gebaut und deployed
This commit is contained in:
Jan Wagner
2026-08-22 18:05:59 +02:00
parent 78b857a80c
commit 820a2f8241
4 changed files with 87 additions and 43 deletions
+14 -16
View File
@@ -57,23 +57,21 @@ services:
labels:
- "traefik.enable=true"
- "traefik.docker.network=proxy"
- "traefik.http.routers.w-make-updates.rule=Host(`updates.w-make.com`)"
- "traefik.http.routers.w-make-updates.priority=10"
- "traefik.http.routers.w-make-updates.entrypoints=websecure"
- "traefik.http.routers.w-make-updates.tls=true"
- "traefik.http.routers.w-make-updates.tls.certresolver=http_resolver"
- "traefik.http.routers.w-make-updates.middlewares=default@file,crowdsec-bouncer-plugin@file"
# Öffentliche API-Routen (hohe Priorität, before portfolio)
- "traefik.http.routers.w-make-api.rule=Host(`w-make.com`) && (PathPrefix(`/v1`) || PathPrefix(`/feed.xml`))"
- "traefik.http.routers.w-make-api.priority=150"
- "traefik.http.routers.w-make-api.entrypoints=websecure"
- "traefik.http.routers.w-make-api.tls=true"
- "traefik.http.routers.w-make-api.tls.certresolver=http_resolver"
- "traefik.http.routers.w-make-api.middlewares=default@file,crowdsec-bouncer-plugin@file"
- "traefik.http.services.w-make-updates.loadbalancer.server.port=8080"
- "traefik.http.middlewares.wmake-updates-authelia.forwardauth.address=http://authelia:9091/api/verify?rd=https://auth.w-make.com"
- "traefik.http.middlewares.wmake-updates-authelia.forwardauth.trustForwardHeader=true"
- "traefik.http.middlewares.wmake-updates-authelia.forwardauth.authResponseHeaders=Remote-User,Remote-Groups"
- "traefik.http.routers.w-make-updates-admin.rule=Host(`updates.w-make.com`) && (PathPrefix(`/admin`) || PathPrefix(`/v1/admin`))"
- "traefik.http.routers.w-make-updates-admin.priority=200"
- "traefik.http.routers.w-make-updates-admin.entrypoints=websecure"
- "traefik.http.routers.w-make-updates-admin.tls=true"
- "traefik.http.routers.w-make-updates-admin.tls.certresolver=http_resolver"
- "traefik.http.routers.w-make-updates-admin.middlewares=default@file,crowdsec-bouncer-plugin@file,wmake-updates-authelia@docker"
- "traefik.http.routers.w-make-updates-admin.service=w-make-updates"
# Admin-UI (höchste Priorität, Authelia-Schutz)
- "traefik.http.routers.w-make-admin.rule=Host(`w-make.com`) && PathPrefix(`/admin`)"
- "traefik.http.routers.w-make-admin.priority=200"
- "traefik.http.routers.w-make-admin.entrypoints=websecure"
- "traefik.http.routers.w-make-admin.tls=true"
- "traefik.http.routers.w-make-admin.tls.certresolver=http_resolver"
- "traefik.http.routers.w-make-admin.middlewares=default@file,crowdsec-bouncer-plugin@file"
networks:
- proxy