Refactor traefik.yml to update routing rules for chat and bot subdomains

swarm/traefik.yml

@@ -10,6 +10,11 @@ services:
       - target: 443
         published: 443
         mode: host
+      # - "7687:7687"
+      # - "8083:8083"
+      # - "8084:8084"
+      # - "8883:8883"
+      # - "5432:5432"
     deploy:
       placement:
         constraints:
@@ -28,6 +33,7 @@ services:
         # admin-auth middleware with HTTP Basic auth
         # Using the environment variables USERNAME and HASHED_PASSWORD
         - traefik.http.middlewares.admin-auth.basicauth.users=${USERNAME?Variable not set}:${HASHED_PASSWORD?Variable not set}
+        - traefik.http.middlewares.csrf.headers.hostsProxyHeaders=["X-CSRFToken"]
         # traefik-https the actual router using HTTPS
         - traefik.http.routers.traefik-public-https.rule=Host(`dashboard.${DOMAIN?Variable not set}`)
         - traefik.http.routers.traefik-public-https.entrypoints=https
@@ -64,6 +70,11 @@ services:
       - --entrypoints.http.http.redirections.entrypoint.permanent=true
       # Create an entrypoint "postgres-socket" listening on port 5432
       - --entrypoints.postgres-socket.address=:5432
+      # Others entrypoints can be created, like a TCP entrypoint
+      # - --entrypoints.mqtt.address=:1883
+      - --entrypoints.web-socket.address=:8083
+      - --entrypoints.web-socket-secure.address=:8084
+      - --entrypoints.bolt-socket.address=:7687
       # Create the certificate resolver "le" for Let's Encrypt, uses the environment variable EMAIL
       - --certificatesresolvers.le.acme.email=${EMAIL?Variable not set}
       # Store the Let's Encrypt certificates in the mounted volume