diff --git a/docker-compose.production.yml b/docker-compose.production.yml index 99b546d..ba1702a 100644 --- a/docker-compose.production.yml +++ b/docker-compose.production.yml @@ -136,6 +136,14 @@ services: - traefik.http.routers.dashboard-socket.priority=30 - traefik.http.routers.dashboard-socket.middlewares=dashboard-socket-strip@docker,rdg-security-headers@docker - traefik.http.middlewares.dashboard-socket-strip.stripprefix.prefixes=/dashboard + - traefik.http.routers.admin-api.rule=(Host(`${PUBLIC_SITE_DOMAIN}`) || Host(`www.${PUBLIC_SITE_DOMAIN}`)) && PathPrefix(`/admin/api`) && !HeaderRegexp(`x-middleware-subrequest`, `.+`) + - traefik.http.routers.admin-api.entrypoints=websecure + - traefik.http.routers.admin-api.tls=true + - traefik.http.routers.admin-api.tls.certresolver=letsencrypt + - traefik.http.routers.admin-api.service=api + - traefik.http.routers.admin-api.priority=50 + - traefik.http.routers.admin-api.middlewares=admin-api-strip@docker,rdg-security-headers@docker + - traefik.http.middlewares.admin-api-strip.stripprefix.prefixes=/admin - traefik.http.middlewares.rdg-security-headers.headers.stsSeconds=31536000 - traefik.http.middlewares.rdg-security-headers.headers.stsIncludeSubdomains=true - traefik.http.middlewares.rdg-security-headers.headers.contentTypeNosniff=true diff --git a/production/docker-compose.production.yml b/production/docker-compose.production.yml index 99b546d..ba1702a 100644 --- a/production/docker-compose.production.yml +++ b/production/docker-compose.production.yml @@ -136,6 +136,14 @@ services: - traefik.http.routers.dashboard-socket.priority=30 - traefik.http.routers.dashboard-socket.middlewares=dashboard-socket-strip@docker,rdg-security-headers@docker - traefik.http.middlewares.dashboard-socket-strip.stripprefix.prefixes=/dashboard + - traefik.http.routers.admin-api.rule=(Host(`${PUBLIC_SITE_DOMAIN}`) || Host(`www.${PUBLIC_SITE_DOMAIN}`)) && PathPrefix(`/admin/api`) && !HeaderRegexp(`x-middleware-subrequest`, `.+`) + - traefik.http.routers.admin-api.entrypoints=websecure + - traefik.http.routers.admin-api.tls=true + - traefik.http.routers.admin-api.tls.certresolver=letsencrypt + - traefik.http.routers.admin-api.service=api + - traefik.http.routers.admin-api.priority=50 + - traefik.http.routers.admin-api.middlewares=admin-api-strip@docker,rdg-security-headers@docker + - traefik.http.middlewares.admin-api-strip.stripprefix.prefixes=/admin - traefik.http.middlewares.rdg-security-headers.headers.stsSeconds=31536000 - traefik.http.middlewares.rdg-security-headers.headers.stsIncludeSubdomains=true - traefik.http.middlewares.rdg-security-headers.headers.contentTypeNosniff=true