11.02. – 17.02.2024

Due to some scheduling mishap I went swimming two times that Sunday. We originally had an appointment for 11:00 am but the guys didn’t show up (of course I still went for a swim). Then the other half of the group agreed on a 1pm meet up. So I took a second round. The lake also gained quite some water over the last weeks of rain. We seem to be back at the level were we’ve been last year this time.

Traefik config voodoo

If you ever need to configure your container in a way that Traefik will allow traffic coming from specific IPs, but require HTTP Basic Authentication from all other IPs … this is how you’d configure this:

    labels:
       - "traefik.enable=true"
       - "traefik.http.routers.spoolman-internal.rule=( Host(`spooly.example.com`) && ClientIP(`192.168.75.0/24` ))"
       - "traefik.http.routers.spoolman-internal.entrypoints=websecure"
       - "traefik.http.routers.spoolman.rule=Host(`spooly.example.com`) && !ClientIP(`192.168.75.0/24` )"
       - "traefik.http.routers.spoolman.entrypoints=websecure"
       - "traefik.http.routers.spoolman.tls=true"
       - "traefik.http.routers.spoolman.tls.certresolver=letsencrypt"
       - "traefik.http.routers.spoolman-internal.tls.certresolver=letsencrypt"
       - "traefik.http.routers.spoolman.middlewares=auth-users"
       - "traefik.http.routers.spoolman-internal.tls=true"
       - "traefik.http.routers.spoolman.service=svc-spoolman"
       - "traefik.http.routers.spoolman-internal.service=svc-spoolman"
       - "traefik.http.services.svc-spoolman.loadbalancer.server.port=8000"
       - "traefik.http.middlewares.auth-users.basicauth.users=admin:$$2y$$05$$K5HviqYOC3ScWoRqUIQ80elXe.QByrAvpvmaDp9yj0oaA4L0LiCE6"

You basically have to define two separate Routers for the same service. Each Router has its own matching rules and own middlewares.

Mind that the ClientIP in the routers matching rule only matches on the ClientIP, not on IPs in the X-Forwared-For HTTP Header.

new T-Shirts \o/

QWertee had a special offer where you’d get a free T-Shirt every one you order. Even on the discounted ones … so I ended up with a whole bunch of new nerdy t-shirts 😀

Of course one was already occupied by kiddo

Birthday

another birthday in da house. The kids … they grow up so fast.

Elections

This is the big year of elections. On Saturday our village society elected a new board. That was formal but still fun. Especially as we there was another instance of our “Dorfdisco” afterwards \o/

From the camera roll