flame: feat: Add example .env file

.gitignore

@@ -1,5 +1,6 @@
 # macOS
 .DS_Store
+._*
 
 # Ignore Docker env files
 *.env

flame/.env.example

@@ -0,0 +1,2 @@
+FLAME_PASSWORD=password_goes_here
+FLAME_ROUTERS_RULE=Host(`domain_goes_here`) || Host(`domain_goes_here`)

flame/docker-compose.yml

@@ -20,7 +20,7 @@ services:
       - public
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.flame.rule=Host(`ykz.app`) || Host(`www.ykz.app`)"
+      - "traefik.http.routers.flame.rule=${FLAME_ROUTERS_RULE}"
       - "traefik.http.routers.flame.middlewares=redirect-www@docker"
       - "traefik.http.middlewares.redirect-www.redirectregex.regex=^https?://www\\.(.+)"
       - "traefik.http.middlewares.redirect-www.redirectregex.replacement=https://$${1}"

traefik/docker-compose.yml

@@ -18,6 +18,8 @@ services:
     volumes:
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
       - "./acme.json:/acme.json"
+      - "./dynamic:/etc/traefik/dynamic"
+      - "./certs:/certs"
     ports:
       - "80:80"
       - "443:443"
@@ -33,6 +35,7 @@ services:
       - "--entrypoints.web.address=:80"
       - "--entrypoints.web.http.redirections.entryPoint.to=websecure"
       - "--entrypoints.websecure.address=:443"
+      - "--providers.file.directory=/etc/traefik/dynamic"
 
       # Let's Encrypt
       - "--certificatesresolvers.le.acme.email=${CF_API_EMAIL}"

traefik/dynamic/cert-neteasemusic.yml

@@ -0,0 +1,4 @@
+tls:
+  certificates:
+    - certFile: /certs/neteasemusic.crt
+      keyFile: /certs/neteasemusic.key

traefik/dynamic/neteasemusic.yml

@@ -0,0 +1,18 @@
+http:
+  routers:
+    neteasemusic:
+      rule: "Host(`music.163.com`)"
+      tls: {}
+      middlewares: unblockNeteaseMusic
+      service: neteasemusic
+  services:
+    neteasemusic:
+      loadBalancer:
+        servers:
+          - url: "https://music.163.com"
+  middlewares:
+    unblockNeteaseMusic:
+      headers:
+        customRequestHeaders:
+          X-Real-IP: "1.1.0.0"
+          X-Forwarded-For: "1.1.0.0"