From ff1a9035ff2fabfab0687f0059a00bb09a1b402f Mon Sep 17 00:00:00 2001 From: Christy Jacob Date: Sat, 19 Oct 2024 01:57:43 +0400 Subject: [PATCH] chore: update firewall rules --- docker/production.yml | 7 +++++++ terraform/modules/digitalocean/droplets.tf | 10 +++++----- 2 files changed, 12 insertions(+), 5 deletions(-) diff --git a/docker/production.yml b/docker/production.yml index 0668e0e7d..ae45ef86a 100644 --- a/docker/production.yml +++ b/docker/production.yml @@ -32,6 +32,13 @@ services: - --providers.docker.exposedByDefault=false - --entrypoints.web.address=:80 - --entrypoints.websecure.address=:443 + - --entrypoints.web.transport.lifeCycle.requestAcceptGraceTimeout=60s + - --entrypoints.web.proxyProtocol.trustedIPs=10.0.0.0/8 + - --entrypoints.websecure.transport.lifeCycle.requestAcceptGraceTimeout=60s + - --entrypoints.websecure.proxyProtocol.trustedIPs=10.0.0.0/8 + - --entryPoints.websecure.forwardedHeaders.trustedIPs=103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,104.16.0.0/13,104.24.0.0/14,108.162.192.0/18,131.0.72.0/22,141.101.64.0/18,162.158.0.0/15,172.64.0.0/13,173.245.48.0/20,188.114.96.0/20,190.93.240.0/20,197.234.240.0/22,198.41.128.0/17 + - --ping + - --ping.entryPoint=web - --entrypoints.web.http.redirections.entrypoint.to=websecure - --entrypoints.web.http.redirections.entrypoint.scheme=https - --providers.docker.constraints=Label(`traefik.constraint-label-stack`,`appwrite`) diff --git a/terraform/modules/digitalocean/droplets.tf b/terraform/modules/digitalocean/droplets.tf index 53000e13d..fb057818b 100644 --- a/terraform/modules/digitalocean/droplets.tf +++ b/terraform/modules/digitalocean/droplets.tf @@ -96,10 +96,10 @@ resource "digitalocean_droplet" "manager" { resource "digitalocean_loadbalancer" "public" { name = "${var.project_name}-${var.region}-${var.environment}" region = var.region - size_unit = var.loadbalancer_size_unit - project_id = digitalocean_project.appwrite_cloud.id + size_unit = 1 + project_id = digitalocean_project.homepage.id vpc_uuid = digitalocean_vpc.subnet.id - droplet_ids = digitalocean_droplet.loadbalancer_v3.*.id + droplet_ids = digitalocean_droplet.manager.*.id redirect_http_to_https = false enable_backend_keepalive = true @@ -109,7 +109,7 @@ resource "digitalocean_loadbalancer" "public" { entry_port = 80 entry_protocol = "http" - target_port = 8080 + target_port = 80 target_protocol = "http" } @@ -117,7 +117,7 @@ resource "digitalocean_loadbalancer" "public" { entry_port = 443 entry_protocol = "http2" - target_port = 8443 + target_port = 443 target_protocol = "http2" tls_passthrough = true