953a9d52af
Domain Strategy: - fig.systems: Homelab services only (removed edfig.dev fallback from all services) - edfig.dev: Professional/public sites (personal site, blog) - figgy.foo: Experimental/private content (SSO protected) Removed edfig.dev Fallbacks: - Updated 22 compose files to remove || Host(...edfig.dev) pattern - All homelab services now use fig.systems only - Traefik email remains admin@edfig.dev Added Caddy Static Sites Service: - compose/services/static-sites/ with Caddy 2 - Serves three domains with different configurations: * edfig.dev (personal/professional) - Public, no SSO * blog.edfig.dev (blog) - Public, Markdown rendering, templates * figgy.foo (experimental) - SSO protected, directory browsing - Example sites with modern, responsive designs - Comprehensive README with usage examples - Auto-reload on config changes (no restarts needed) Features: - Markdown rendering (write .md, serves as HTML) - Go templates for dynamic content - Directory browsing (figgy.foo) - Automatic gzip compression - Static asset caching - Zero-downtime config reloads Updated Documentation: - README.md: Added domain strategy section, static sites in directory structure - README.md: Added static sites to service URLs table - README.md: Updated deployment instructions
26 lines
931 B
YAML
26 lines
931 B
YAML
services:
|
|
tinyauth:
|
|
container_name: tinyauth
|
|
image: ghcr.io/steveiliop56/tinyauth:latest
|
|
env_file: .env
|
|
volumes:
|
|
- ./data:/data
|
|
restart: unless-stopped
|
|
networks:
|
|
- homelab
|
|
labels:
|
|
traefik.enable: true
|
|
# Web UI routing
|
|
traefik.http.routers.tinyauth.rule: Host(`auth.fig.systems`)
|
|
traefik.http.routers.tinyauth.entrypoints: websecure
|
|
traefik.http.routers.tinyauth.tls.certresolver: letsencrypt
|
|
traefik.http.routers.tinyauth.service: tinyauth-ui
|
|
traefik.http.services.tinyauth-ui.loadbalancer.server.port: 3000
|
|
# Forward Auth Middleware
|
|
traefik.http.middlewares.tinyauth.forwardauth.address: http://tinyauth:3000/api/auth/traefik
|
|
traefik.http.middlewares.tinyauth.forwardauth.trustforwardheader: true
|
|
traefik.http.middlewares.tinyauth.forwardauth.authresponseheaders: X-Forwarded-User
|
|
|
|
networks:
|
|
homelab:
|
|
external: true
|