add stateful config files

stateful/containers_storage/conduit-nginx/matrix.conf

@@ -0,0 +1,19 @@
+server {
+    server_name matrix.slowte.ch;
+    listen      80 default_server;
+
+    location /.well-known/matrix/server {
+       return 200 '{"m.server": "matrix.slowte.ch:443"}';
+       types { } default_type "application/json; charset=utf-8";
+    }
+
+   location /.well-known/matrix/client {
+       return 200 '{"m.homeserver": {"base_url": "https://matrix.slowte.ch"}}';
+       types { } default_type "application/json; charset=utf-8";
+       add_header "Access-Control-Allow-Origin" *;
+   }
+
+   location / {
+       return 404;
+   }
+}

stateful/containers_storage/traefik/dynamic/homeassistant.yaml

@@ -0,0 +1,16 @@
+http:
+  routers:
+    router-homeassistant-https:
+      rule: Host(`home.slowte.ch`)
+      tls:
+        certResolver: letsencrypt
+      service: service-homeassistant
+      entryPoints:
+        - secure
+        - web
+
+  services:
+    service-homeassistant:
+      loadBalancer:
+        servers:
+          - url: "http://haos.hydrogen.here:8123"

stateful/containers_storage/traefik/dynamic/kuma.yaml

@@ -0,0 +1,16 @@
+http:
+  routers:
+    router-uptimekuma-https:
+      rule: Host(`up.slowte.ch`)
+      tls:
+        certResolver: letsencrypt
+      service: service-uptimekuma
+      entryPoints:
+        - secure
+        - web
+
+  services:
+    service-uptimekuma:
+      loadBalancer:
+        servers:
+          - url: "http://haos.hydrogen.here:3001"

stateful/containers_storage/traefik/dynamic/leantime.yaml

@@ -0,0 +1,16 @@
+http:
+  routers:
+    router-leantime-https:
+      rule: Host(`discover.leantime.slowte.ch`)
+      tls:
+        certResolver: letsencrypt
+      service: service-leantime
+      entryPoints:
+        - secure
+        - web
+
+  services:
+    service-leantime:
+      loadBalancer:
+        servers:
+          - url: "http://stateless.hydrogen.here:8002"

stateful/containers_storage/traefik/dynamic/n8n.yaml

@@ -0,0 +1,16 @@
+http:
+  routers:
+    router-n8n-https:
+      rule: Host(`flows.slowte.ch`)
+      tls:
+        certResolver: letsencrypt
+      service: service-n8n
+      entryPoints:
+        - secure
+        - web
+
+  services:
+    service-n8n:
+      loadBalancer:
+        servers:
+          - url: "http://stateless.hydrogen.here:8001"

stateful/containers_storage/traefik/dynamic/nextcloud.yaml

@@ -0,0 +1,34 @@
+http:
+  routers:
+    router-nextcloud-https:
+      rule: "Host(`cloud.slowte.ch`)"
+      entrypoints:
+        - "secure"
+      service: service-nextcloud
+      middlewares:
+        - nextcloud-chain
+      tls:
+        certresolver: "letsencrypt"
+
+  services:
+    service-nextcloud:
+      loadBalancer:
+        servers:
+          - url: "http://nextcloud.hydrogen.here:11000"
+
+  middlewares:
+    nextcloud-secure-headers:
+      headers:
+        hostsProxyHeaders:
+          - "X-Forwarded-Host"
+        referrerPolicy: "same-origin"
+
+      https-redirect:
+        redirectscheme:
+          scheme: https 
+
+      nextcloud-chain:
+        chain:
+          middlewares:
+            - https-redirect
+            - nextcloud-secure-headers

stateful/containers_storage/traefik/dynamic/ntfy.yaml

@@ -0,0 +1,16 @@
+http:
+  routers:
+    router-ntfy-https:
+      rule: Host(`dring.slowte.ch`)
+      tls:
+        certResolver: letsencrypt
+      service: service-ntfy
+      entryPoints:
+        - secure
+        - web
+
+  services:
+    service-ntfy:
+      loadBalancer:
+        servers:
+          - url: "http://stateless.hydrogen.here:8003"

stateful/containers_storage/traefik/dynamic/woodpecker.yaml

@@ -0,0 +1,16 @@
+http:
+  routers:
+    router-woodpecker-https:
+      rule: Host(`ci.slowte.ch`)
+      tls:
+        certResolver: letsencrypt
+      service: service-woodpecker
+      entryPoints:
+        - secure
+        - web
+
+  services:
+    service-woodpecker:
+      loadBalancer:
+        servers:
+          - url: "http://stateless.hydrogen.here:8000"

stateful/containers_storage/traefik/traefik.toml

@@ -0,0 +1,21 @@
+[entryPoints]
+  [entryPoints.web]
+    address = ":80"
+  [entryPoints.secure]
+    address = ":443"
+
+[providers]
+  [providers.file]
+    directory = "/etc/traefik/dynamic"
+  [providers.docker]
+    exposedByDefault = false
+
+[api]
+  insecure = true
+  dashboard = true
+
+[certificatesResolvers.letsencrypt.acme]
+  email = "$ACME_EMAIL"
+  storage = "/etc/traefik/acme.json"
+  [certificatesResolvers.letsencrypt.acme.httpChallenge]
+    entryPoint = "web"