valknar
3761924242
The public traefik.pivoine.art path round-trips through the host's published port, and Docker's hairpin NAT there rewrites the source IP before it reaches vpn-only's allowlist, so pulsenode's own request was getting a 403 despite falcon_network being allowlisted. Port 8080 is not published to the host, so it's reachable only from other falcon_network containers - no TLS/vpn-only needed, and it's not exposed externally.
72 lines
1.5 KiB
YAML
72 lines
1.5 KiB
YAML
settings:
|
|
title: PulseNode
|
|
|
|
theme:
|
|
mode: dark
|
|
|
|
groups:
|
|
- name: Services
|
|
widgets:
|
|
- type: system
|
|
interval: 5s
|
|
|
|
- type: traefik
|
|
name: Traefik
|
|
apiUrl: http://traefik:8080/api
|
|
interval: 15s
|
|
|
|
- type: docker
|
|
name: Coolify
|
|
containerName: coolify
|
|
icon: coolify
|
|
href: https://${TRAEFIK_HOST_COOLIFY}
|
|
interval: 10s
|
|
|
|
- type: docker
|
|
name: Gitea
|
|
containerName: gitea
|
|
icon: gitea
|
|
href: https://${TRAEFIK_HOST_GITEA}
|
|
interval: 10s
|
|
|
|
- type: docker
|
|
name: Code Server
|
|
containerName: code
|
|
href: https://${TRAEFIK_HOST_CODE}
|
|
interval: 10s
|
|
|
|
- type: docker
|
|
name: Immich
|
|
containerName: immich
|
|
icon: immich
|
|
href: https://${TRAEFIK_HOST_IMMICH}
|
|
interval: 10s
|
|
|
|
- type: docker
|
|
name: n8n
|
|
containerName: n8n
|
|
icon: n8n
|
|
href: https://${TRAEFIK_HOST_N8N}
|
|
interval: 10s
|
|
|
|
- type: docker
|
|
name: Passbolt
|
|
containerName: passbolt
|
|
icon: passbolt
|
|
href: https://${TRAEFIK_HOST_PASSBOLT}
|
|
interval: 10s
|
|
|
|
- type: docker
|
|
name: Umami
|
|
containerName: umami
|
|
icon: umami
|
|
href: https://${TRAEFIK_HOST_UMAMI}
|
|
interval: 10s
|
|
|
|
- type: docker
|
|
name: Headscale
|
|
containerName: headscale
|
|
icon: headscale
|
|
href: https://${TRAEFIK_HOST_HEADSCALE}
|
|
interval: 10s
|