feat: Fail2ban, auto configure reverse proxies

2026-04-01 22:45:10 +01:00
parent f17526afc3
commit 3f28ed0c14
11 changed files with 451 additions and 19 deletions
@@ -20,9 +20,203 @@ cloudflare_api_token: "{{ vault_cloudflare_api_token }}"
 # Pocket ID configuration
 pocketid_encryption_key: "{{ vault_pocketid_encryption_key }}"

-sonarr_host: 10.0.2.25
-sonarr_port: 8989
+auto_configure_traefik:
+  # arr
+  sonarr:
+    subdomain: "sonarr"
+    host: "10.0.2.25"
+    port: 8989
+    auth_required: true
+  radarr:
+    subdomain: "radarr"
+    host: "10.0.2.25"
+    port: 7878
+    auth_required: true
+  lidarr:
+    subdomain: "lidarr"
+    host: "10.0.2.25"
+    port: 8686
+    auth_required: true
+  transmission:
+    subdomain: "transmission"
+    host: "10.0.2.25"
+    port: 9091
+    auth_required: true
+  tdarr:
+    subdomain: "tdarr"
+    host: "10.0.2.25"
+    port: 8265
+    auth_required: true
+  bazarr:
+    subdomain: "bazarr"
+    host: "10.0.2.25"
+    port: 6767
+    auth_required: true
+  seerr:
+    subdomain: "overseerr"
+    host: "10.0.2.25"
+    port: 5055
+    auth_required: false
+  prowlarr:
+    subdomain: "prowlarr"
+    host: "10.0.2.25"
+    port: 9696
+    auth_required: true
+  unpackerr:
+    subdomain: "unpackerr"
+    host: "10.0.2.25"
+    port: 5656
+    auth_required: true

+  homeassistant:
+    subdomain: "homeassistant"
+    host: "10.0.2.100"
+    port: 8123
+    auth_required: false
+
+  # media
+  plex:  
+    subdomain: "plex"
+    host: "10.0.2.10"
+    port: 32400
+    auth_required: false
+  tracearr:
+    subdomain: "tracearr"
+    host: "10.0.2.21"
+    port: 3000
+    auth_required: true
+  tautulli:
+    subdomain: "tautulli"
+    host: "10.0.2.21"
+    port: 8181
+    auth_required: true
+
+  vaultwarden:
+    subdomain: "vaultwarden"
+    host: "10.0.2.27"
+    port: 8004
+    auth_required: false
+  changedetection:
+    subdomain: "changedetection"
+    host: "10.0.2.24"
+    port: 5000
+    auth_required: true
+  nextcloud:
+    subdomain: "cloud"
+    host: "10.0.2.30"
+    port: 8001
+    auth_required: false
+  convertx:
+    subdomain: "convertx"
+    host: "10.0.2.43"
+    port: 3000
+    auth_required: true
+  dawarich:
+    subdomain: "places"
+    host: "10.0.2.48"
+    port: 3000
+    auth_required: false
+  frigate:
+    subdomain: "frigate"
+    host: "10.0.2.14"
+    port: 5000
+    auth_required: true
+  droposs:
+    subdomain: "games"
+    host: "10.0.2.46"
+    port: 3000
+    auth_required: false
+  # geoguessr:
+  #   subdomain: "geoguessr"
+  #   host: "10.0.2.39"
+  #   port: 8080
+  #   auth_required: true
+  gitea:
+    subdomain: "gitea"
+    host: "10.0.2.28"
+    port: 3000
+    auth_required: true
+  immich:
+    subdomain: "immich"
+    host: "10.0.2.18"
+    port: 2283
+    auth_required: false
+  mastodon:
+    subdomain: "social"
+    host: "10.0.2.20"
+    port: 80
+    auth_required: false
+  matrix:
+    subdomain: "chat"
+    host: "10.0.2.20"
+    port: 8008
+    auth_required: false
+  mealie:
+    subdomain: "recipes"
+    host: "10.0.2.26"
+    port: 9000
+    auth_required: false
+  truenas:
+    subdomain: "nas"
+    host: "10.0.2.200"
+    port: 80
+    auth_required: true
+  paperless:
+    subdomain: "paperless"
+    host: "10.0.2.29"
+    port: 8003
+    auth_required: true
+  pbs:
+    subdomain: "pbs"
+    host: "10.0.2.104"
+    port: 8007
+    auth_required: true
+  # pinchflat:
+  #   subdomain: "youtube"
+  #   host: "10.0.2.23"
+  #   port: 8081
+  #   auth_required: true
+  proxmox:
+    subdomain: "proxmox"
+    host: "10.0.2.2"
+    port: 8006
+    auth_required: true
+  resume:
+    subdomain: "resume"
+    host: "10.0.2.53"
+    port: 3000
+    auth_required: true
+    auth_bypass_paths:
+      - /lino
+      - /assets
+      - /api
+  speedtest-tracker:
+    subdomain: "fast"
+    host: "10.0.2.254"
+    port: 8765
+    auth_required: true
+  stocks:
+    subdomain: "stocks"
+    host: "10.0.2.40"
+    port: 3333
+    auth_required: false
+  super-productivity:
+    subdomain: "tasks"
+    host: "10.0.2.45"
+    port: 80
+    auth_required: true
+  uptime-kuma:
+    subdomain: "uptime"
+    host: "10.0.2.203"
+    port: 3001
+    auth_required: true
+  wealthfolio:
+    subdomain: "wealth"
+    host: "10.0.2.40"
+    port: 8088
+    auth_required: true
+
+# Auth services configuration
 pocketid_host: 10.0.4.10
 pocketid_port: 8001