From dfdefb08c42a7fd7f410da8762b2ea1b1ca3be0d Mon Sep 17 00:00:00 2001 From: Colin Hebert Date: Tue, 25 Apr 2023 09:34:10 +1000 Subject: [PATCH] Remove transmission --- services/authentication/configs/access.yml | 8 ++++---- services/reverse-proxy/README.md | 2 +- .../reverse-proxy/configs/dynamic/qbittorrent-api.yml | 7 +++++++ .../reverse-proxy/configs/dynamic/transmission-api.yml | 7 ------- 4 files changed, 12 insertions(+), 12 deletions(-) create mode 100644 services/reverse-proxy/configs/dynamic/qbittorrent-api.yml delete mode 100644 services/reverse-proxy/configs/dynamic/transmission-api.yml diff --git a/services/authentication/configs/access.yml b/services/authentication/configs/access.yml index b623ccd..87e9c81 100644 --- a/services/authentication/configs/access.yml +++ b/services/authentication/configs/access.yml @@ -28,12 +28,12 @@ access_control: default_policy: deny rules: - # Support for one factor for transmission API - # Only users in "transmission-basic" should be allowed to do so - - domain_regex: '^transmission-api\.' + # Support for one factor for qbittorrent API + # Only users in "qbittorrent-basic" should be allowed to do so + - domain_regex: '^qbittorrent-api\.' policy: one_factor subject: - - 'group:transmission-basic' + - 'group:qbittorrent-basic' # Disable authentication on API protected by API keys. # Note those are behind authelia, therefore external access to the API; internal access doesn't require a bypass - domain_regex: '^(sabnzbd|prowlarr|radarr|sonarr|bazarr|notifiarr|readarr-audiobook|readarr-ebook)\.' diff --git a/services/reverse-proxy/README.md b/services/reverse-proxy/README.md index ab8355a..54ab9f5 100644 --- a/services/reverse-proxy/README.md +++ b/services/reverse-proxy/README.md @@ -20,7 +20,7 @@ Creates a reverse proxy to expose other services running in the NAS - `dynamic/synology.yml`: Route exposing the Synology DSM interface of the host - `dynamic/tls.yml`: [TLS](https://doc.traefik.io/traefik/https/tls/) configuration of the instance - `dynamic/traefik.yml`: Route exposing the Traefik API/Dashboard -- `dynamic/transmission-api.yml`: Special case exposing the API of Transmission with BasicAuth managed by the Authentication service +- `dynamic/qbittorrent-api.yml`: Special case exposing the API of qBittorrent with BasicAuth managed by the Authentication service ### 🔒 Secrets - `traefik_tls_cert`: Self-signed certificate for Traefik. Particularly useful in development to avoid generating new certificates on each restart. diff --git a/services/reverse-proxy/configs/dynamic/qbittorrent-api.yml b/services/reverse-proxy/configs/dynamic/qbittorrent-api.yml new file mode 100644 index 0000000..5e51128 --- /dev/null +++ b/services/reverse-proxy/configs/dynamic/qbittorrent-api.yml @@ -0,0 +1,7 @@ +http: + routers: + qbittorrent-api: + rule: '{{ $s := "qbittorrent-api" }}{{ range $i, $d := splitList "," (env `NASCOMPOSE_TRAEFIK_DOMAINS`) }}{{ if $i }} || {{end}}Host(`{{ $s }}.{{ $d }}`){{ end }}' + service: qbittorrent@docker + middlewares: + - authelia-basic@file diff --git a/services/reverse-proxy/configs/dynamic/transmission-api.yml b/services/reverse-proxy/configs/dynamic/transmission-api.yml deleted file mode 100644 index 0f5d544..0000000 --- a/services/reverse-proxy/configs/dynamic/transmission-api.yml +++ /dev/null @@ -1,7 +0,0 @@ -http: - routers: - transmission-api: - rule: '{{ $s := "transmission-api" }}{{ range $i, $d := splitList "," (env `NASCOMPOSE_TRAEFIK_DOMAINS`) }}{{ if $i }} || {{end}}Host(`{{ $s }}.{{ $d }}`){{ end }}' - service: transmission@docker - middlewares: - - authelia-basic@file