florian.richer/myserver-configuration
1
0
Fork 0
Code Activity

Fix home-assistant

Browse source
This commit is contained in:
florian 2023-01-05 20:13:40 +01:00
parent 95e8da7960
commit 1a134aa687
3 changed files with 7 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
docker-compose.yml
View file

@ -18,6 +18,8 @@ services:
- ./config/acme.json:/acme.json:rw - ./config/acme.json:/acme.json:rw
- /etc/timezone:/etc/timezone:ro - /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro - /etc/localtime:/etc/localtime:ro
extra_hosts:
- "host.docker.internal:host-gateway"
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.middlewares.traefik-auth.basicauth.users=mrdev023:$$2y$$05$$t51tXUW6zO9dndSK1JEFS.utJ3th/RYVSgDlouOZhUigjbkTX1zQC$$" - "traefik.http.middlewares.traefik-auth.basicauth.users=mrdev023:$$2y$$05$$t51tXUW6zO9dndSK1JEFS.utJ3th/RYVSgDlouOZhUigjbkTX1zQC$$"

6
firewall
View file

@ -72,9 +72,6 @@ iptables -A OUTPUT -p tcp --dport 2277 -j ACCEPT # ACCEPT SSH OUTPUT LIKE GITLAB
iptables -A INPUT -p icmp -j ACCEPT iptables -A INPUT -p icmp -j ACCEPT
iptables -A OUTPUT -p icmp -j ACCEPT iptables -A OUTPUT -p icmp -j ACCEPT
# CHROMECAST
iptables -A OUTPUT -p tcp --dport 5555 -j ACCEPT
# Parer les attaques de type Déni de Service # Parer les attaques de type Déni de Service
iptables -A FORWARD -p tcp --syn -m limit --limit 1/second -j ACCEPT iptables -A FORWARD -p tcp --syn -m limit --limit 1/second -j ACCEPT
iptables -A FORWARD -p udp -m limit --limit 1/second -j ACCEPT iptables -A FORWARD -p udp -m limit --limit 1/second -j ACCEPT
@ -82,3 +79,6 @@ iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/second -
# Parer les scans de ports # Parer les scans de ports
iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT
# Allow all from private network and docker network
iptables -A INPUT -j ACCEPT -d 172.17.0.0/16

8
home_assistant/docker-compose.yml
View file

@ -10,13 +10,9 @@ services:
volumes: volumes:
- home_assistant_config:/config - home_assistant_config:/config
- /etc/localtime:/etc/localtime:ro - /etc/localtime:/etc/localtime:ro
ports:
- 8123:8123
network_mode: host network_mode: host
cap_add: expose:
- NET_ADMIN - 8123
- NET_BIND_SERVICE
- SYS_ADMIN
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.homeassistant-secure.entrypoints=https" - "traefik.http.routers.homeassistant-secure.entrypoints=https"