server-setup/Docker/traefik & teleport/etc/teleport.yaml

67 lines
1.8 KiB
YAML

version: v2
teleport:
nodename: example
data_dir: /var/lib/teleport
log:
output: stdout
severity: INFO
format:
output: text
ca_pin: ""
diag_addr: ""
auth_service:
enabled: "yes"
listen_addr: 0.0.0.0:3025
public_addr: teleport.example.de:3025
cluster_name: teleport.example.de
authentication:
type: github
second_factor: on
webauthn:
rp_id: tp.unjx.de
proxy_listener_mode: multiplex
session_recording: "off"
client_idle_timeout: "10m"
client_idle_timeout_message: "10 minutes idle... you have been logged out"
web_idle_timeout: 10m
ssh_service:
enabled: "yes"
permit_user_env: true
commands:
- name: Compose
command: ["/bin/sh", "-c", "docker compose version --short"]
period: "168h"
- name: Docker
command: ["/bin/sh", "-c", "docker system info | grep Running | cut -d' ' -f4"]
period: "30m"
- name: Engine
command: ["/bin/sh", "-c", "docker version --format '{{.Server.Version}}'"]
period: "168h"
- name: Kernel
command: ["/bin/uname", "-r"]
period: "168h"
- name: Teleport
command: ["/bin/sh", "-c", "teleport version | cut -d' ' -f2"]
period: "168h"
- name: Restic
command: ["/bin/sh", "-c", "restic version | cut -d ' ' -f2"]
period: "168h"
- name: Rclone
command: ["/bin/sh", "-c", "rclone version | head -1 | cut -d ' ' -f2"]
period: "168h"
proxy_service:
enabled: "yes"
web_listen_addr: 0.0.0.0:3080
public_addr: teleport.example.de:443
ssh_public_addr: teleport.example.de:3023
tunnel_public_addr: teleport.example.de:3024
https_keypairs: []
acme:
enabled: "yes"
email: "mail@example.de"
app_service:
enabled: "yes"
apps:
- name: "proxy"
description: "Traefik"
uri: "http://localhost:8080"