mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-18 05:52:51 +00:00
Florian ForsterandGitHub
77e3d08f22
* docs: split out self-hosting into section * check for broken links * fix netlify proxy forward * use full path
144 lines
2.7 KiB
Plaintext
144 lines
2.7 KiB
Plaintext
## TLS mode external
|
|
|
|
```yaml
|
|
entrypoints:
|
|
web:
|
|
address: ":80"
|
|
websecure:
|
|
address: ":443"
|
|
tls:
|
|
stores:
|
|
default:
|
|
defaultCertificate:
|
|
providers:
|
|
file:
|
|
filename: /etc/traefik/traefik.yaml
|
|
http:
|
|
middlewares:
|
|
zitadel:
|
|
headers:
|
|
isDevelopment: false
|
|
allowedHosts:
|
|
- 'localhost'
|
|
redirect-to-https:
|
|
redirectScheme:
|
|
scheme: https
|
|
port: 443
|
|
permanent: true
|
|
routers:
|
|
router0:
|
|
entryPoints:
|
|
- web
|
|
middlewares:
|
|
- redirect-to-https
|
|
rule: 'HostRegexp(`localhost`, `{subdomain:[a-z]+}.localhost`)'
|
|
service: zitadel
|
|
router1:
|
|
entryPoints:
|
|
- websecure
|
|
service: zitadel
|
|
middlewares:
|
|
- zitadel
|
|
rule: 'HostRegexp(`localhost`, `{subdomain:[a-z]+}.localhost`)'
|
|
tls:
|
|
domains:
|
|
- main: "localhost"
|
|
sans:
|
|
- "*.localhost"
|
|
- "localhost"
|
|
services:
|
|
zitadel:
|
|
loadBalancer:
|
|
servers:
|
|
- url: h2c://localhost:8080
|
|
passHostHeader: true
|
|
```
|
|
|
|
## TLS mode enabled
|
|
|
|
```yaml
|
|
entrypoints:
|
|
web:
|
|
address: ":80"
|
|
websecure:
|
|
address: ":443"
|
|
tls:
|
|
stores:
|
|
default:
|
|
defaultCertificate:
|
|
providers:
|
|
file:
|
|
filename: /etc/traefik/traefik.yaml
|
|
http:
|
|
middlewares:
|
|
zitadel:
|
|
headers:
|
|
isDevelopment: false
|
|
allowedHosts:
|
|
- 'localhost'
|
|
redirect-to-https:
|
|
redirectScheme:
|
|
scheme: https
|
|
port: 443
|
|
permanent: true
|
|
routers:
|
|
router0:
|
|
entryPoints:
|
|
- web
|
|
middlewares:
|
|
- redirect-to-https
|
|
rule: 'HostRegexp(`localhost`, `{subdomain:[a-z]+}.localhost`)'
|
|
service: zitadel
|
|
# The actual ZITADEL router
|
|
router1:
|
|
entryPoints:
|
|
- websecure
|
|
service: zitadel
|
|
middlewares:
|
|
- zitadel
|
|
rule: 'HostRegexp(`localhost`, `{subdomain:[a-z]+}.localhost`)'
|
|
tls:
|
|
domains:
|
|
- main: "localhost"
|
|
sans:
|
|
- "*.localhost"
|
|
- "localhost"
|
|
services:
|
|
zitadel:
|
|
loadBalancer:
|
|
servers:
|
|
- url: https://localhost:8080
|
|
passHostHeader: true
|
|
```
|
|
|
|
## TLS mode disabled
|
|
|
|
```yaml
|
|
entrypoints:
|
|
web:
|
|
address: ":80"
|
|
providers:
|
|
file:
|
|
filename: /etc/traefik/traefik.yaml
|
|
http:
|
|
middlewares:
|
|
zitadel:
|
|
headers:
|
|
isDevelopment: false
|
|
allowedHosts:
|
|
- 'localhost'
|
|
routers:
|
|
router0:
|
|
entryPoints:
|
|
- web
|
|
middlewares:
|
|
- redirect-to-https
|
|
rule: 'HostRegexp(`localhost`, `{subdomain:[a-z]+}.localhost`)'
|
|
service: zitadel
|
|
services:
|
|
zitadel:
|
|
loadBalancer:
|
|
servers:
|
|
- url: h2c://localhost:8080
|
|
passHostHeader: true
|
|
``` |