diff --git a/servers/containers/jade-website-frontend.container b/servers/containers/jade-website-frontend.container index 249a45a1..74b65703 100644 --- a/servers/containers/jade-website-frontend.container +++ b/servers/containers/jade-website-frontend.container @@ -17,6 +17,9 @@ Label="traefik.enable=true" Label="traefik.http.routers.jade-website-frontend.rule=Host(`jade.ellis.link`)" Label="traefik.http.routers.jade-website-frontend.entrypoints=https" +Label="traefik.http.middlewares.jade-website-frontend-compress.compress=true" +Label="traefik.http.routers.jade-website-frontend.middlewares=jade-website-frontend-compress" + Label="traefik.http.routers.jade-website-frontend.tls.certresolver=letsencrypt" [Service] diff --git a/servers/traefik/config.toml b/servers/traefik/config.toml index c156d902..28c46e4c 100644 --- a/servers/traefik/config.toml +++ b/servers/traefik/config.toml @@ -30,6 +30,15 @@ trustedIPs = [ ] to="https" scheme = "https" +[http.middlewares] +[http.middlewares.traefik-compress.compress] + +[http.routers.http] +middlewares = "traefik-compress" +[http.routers.https] +middlewares = "traefik-compress" +[http.routers.traefik] +middlewares = "traefik-compress" # [entryPoints.traefik] # address = ":9000" @@ -41,10 +50,12 @@ storage = "/certificates/acme.json" # - "--certificatesresolvers.letsencrypt.acme.httpchallenge=true" # - "--certificatesresolvers.letsencrypt.acme.httpChallenge.entryPoint=http" tlschallenge = true + +[tls.options] [tls.options.modern] minVersion = "VersionTLS13" - -[tls.options.intermediate] +sniStrict = true +[tls.options.default] minVersion = "VersionTLS12" cipherSuites = [ "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", @@ -53,4 +64,6 @@ cipherSuites = [ "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305" -] \ No newline at end of file +] + +sniStrict = true \ No newline at end of file