fix: configurar rutas públicas en Traefik para assets de Nuxt
- Exponer solo /_nuxt/* sin autenticación (necesario para funcionamiento) - Mantener autenticación Authentik en todas las demás rutas - Priorizar seguridad: /api/*, manifest y favicon protegidos
This commit is contained in:
@@ -32,12 +32,23 @@ services:
|
|||||||
# Service
|
# Service
|
||||||
- "traefik.http.services.${APP_NAME}.loadbalancer.server.port=3000"
|
- "traefik.http.services.${APP_NAME}.loadbalancer.server.port=3000"
|
||||||
|
|
||||||
# Router principal con Authentik Forward Auth
|
# Router para assets estáticos de Nuxt (sin autenticación) - mayor prioridad
|
||||||
|
# SOLO /_nuxt/* para que la aplicación funcione
|
||||||
|
- "traefik.http.routers.${APP_NAME}-public.rule=Host(`${APP_DOMAIN}`) && PathPrefix(`/_nuxt`)"
|
||||||
|
- "traefik.http.routers.${APP_NAME}-public.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.${APP_NAME}-public.tls=true"
|
||||||
|
- "traefik.http.routers.${APP_NAME}-public.tls.certresolver=letsencrypt"
|
||||||
|
- "traefik.http.routers.${APP_NAME}-public.service=${APP_NAME}"
|
||||||
|
- "traefik.http.routers.${APP_NAME}-public.priority=100"
|
||||||
|
- "traefik.http.routers.${APP_NAME}-public.middlewares=${APP_NAME}-headers"
|
||||||
|
|
||||||
|
# Router principal con Authentik Forward Auth (menor prioridad)
|
||||||
- "traefik.http.routers.${APP_NAME}.rule=Host(`${APP_DOMAIN}`)"
|
- "traefik.http.routers.${APP_NAME}.rule=Host(`${APP_DOMAIN}`)"
|
||||||
- "traefik.http.routers.${APP_NAME}.entrypoints=websecure"
|
- "traefik.http.routers.${APP_NAME}.entrypoints=websecure"
|
||||||
- "traefik.http.routers.${APP_NAME}.tls=true"
|
- "traefik.http.routers.${APP_NAME}.tls=true"
|
||||||
- "traefik.http.routers.${APP_NAME}.tls.certresolver=letsencrypt"
|
- "traefik.http.routers.${APP_NAME}.tls.certresolver=letsencrypt"
|
||||||
- "traefik.http.routers.${APP_NAME}.service=${APP_NAME}"
|
- "traefik.http.routers.${APP_NAME}.service=${APP_NAME}"
|
||||||
|
- "traefik.http.routers.${APP_NAME}.priority=50"
|
||||||
- "traefik.http.routers.${APP_NAME}.middlewares=authentik-forward-auth@file,${APP_NAME}-headers"
|
- "traefik.http.routers.${APP_NAME}.middlewares=authentik-forward-auth@file,${APP_NAME}-headers"
|
||||||
|
|
||||||
# Custom headers middleware
|
# Custom headers middleware
|
||||||
|
|||||||
Reference in New Issue
Block a user