beatzaplenty/docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #37 from beatz174-bit/codex/add-traefik-label-for-basic-authentication

Browse Source 
Add Traefik basic-auth labels to mtls-bridge
This commit is contained in:
beatz174-bit
2026-04-14 09:32:54 +10:00
committed by GitHub
parent 85cf56fcaf d06c53ef0b
commit 85d7859b14
2 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
monitoring/mtls-bridge/README.md
+1
View File
@@ -16,6 +16,7 @@ Internal HTTP-to-mTLS bridge for services that cannot present client certificate
- `CA_CERT` (default `/certs/ca.crt`): CA certificate bundle used to verify upstream TLS. - `CA_CERT` (default `/certs/ca.crt`): CA certificate bundle used to verify upstream TLS.
- `TIMEOUT` (default `5`): request timeout in seconds. - `TIMEOUT` (default `5`): request timeout in seconds.
- `LOG_LEVEL` (default `INFO`): Python logging level. - `LOG_LEVEL` (default `INFO`): Python logging level.
- `MTLS_BRIDGE_BASIC_AUTH_USERS` (required for Traefik auth): value for `traefik.http.middlewares.*.basicauth.users` (e.g. `user:$$apr1$$...`).
## Endpoints ## Endpoints
monitoring/mtls-bridge/docker-compose.yml
+2
View File
@@ -19,6 +19,8 @@ services:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.mtls-bridge.entrypoints=websecure" - "traefik.http.routers.mtls-bridge.entrypoints=websecure"
- "traefik.http.routers.mtls-bridge.tls.certresolver=myresolver" - "traefik.http.routers.mtls-bridge.tls.certresolver=myresolver"
- "traefik.http.routers.mtls-bridge.middlewares=mtls-bridge-auth"
- "traefik.http.middlewares.mtls-bridge-auth.basicauth.users=${MTLS_BRIDGE_BASIC_AUTH_USERS}"
- "io.portainer.accesscontrol.public" - "io.portainer.accesscontrol.public"
# - "traefik.http.routers.searxng.middlewares=crowdsec@file,secHeaders@file,error-pages-middleware" # - "traefik.http.routers.searxng.middlewares=crowdsec@file,secHeaders@file,error-pages-middleware"
- "traefik.http.services.mtls-bridge.loadbalancer.server.port=8080" - "traefik.http.services.mtls-bridge.loadbalancer.server.port=8080"