From aef8a589d0cab9d227e246094d1b0ccb26fd4462 Mon Sep 17 00:00:00 2001
From: lornk <uniac@web.de>
Date: Tue, 22 Jul 2025 21:14:24 +0200
Subject: [PATCH] =?UTF-8?q?config/dynamic/router.yml=20hinzugef=C3=BCgt?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 config/dynamic/router.yml | 108 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 108 insertions(+)
 create mode 100644 config/dynamic/router.yml

diff --git a/config/dynamic/router.yml b/config/dynamic/router.yml
new file mode 100644
index 0000000..d179e9e
--- /dev/null
+++ b/config/dynamic/router.yml
@@ -0,0 +1,108 @@
+http:
+  middlewares:
+    dach-geo-block:
+      plugin:
+        geoblock:
+          allowLocalRequests: false
+          allowUnknownCountries: false
+          api: https://get.geojs.io/v1/ip/country/{ip}
+          apiTimeoutMs: 150
+          cacheSize: 15
+          countries:
+            - CH
+            - AT
+            - DE
+          forceMonthlyUpdate: true
+          logAllowedRequests: false
+          logApiRequests: true
+          logLocalRequests: false
+          silentStartUp: false
+          unknownCountryApiResponse: nil
+
+  routers:
+    jf-router:
+      rule: "Host(`jf.example.com`)"
+      middlewares:
+      - dach-geo-block
+      service: jf-service
+      entryPoints:
+        - web
+        - websecure
+      tls:
+        certResolver: letsencrypt
+    ha-router:
+      rule: "Host(`ha.example.com`)"
+      middlewares:
+      - dach-geo-block
+      service: ha-service
+      entryPoints:
+        - web
+        - websecure
+      tls:
+        certResolver: letsencrypt
+    mealie-router:
+      rule: "Host(`mealie.example.com`)"
+      middlewares:
+      - dach-geo-block
+      service: mealie-service
+      entryPoints:
+        - web
+        - websecure
+      tls:
+        certResolver: letsencrypt
+    nextcloud-router:
+      rule: "Host(`nextcloud.example.com`)"
+      middlewares:
+      - dach-geo-block
+      service: nextcloud-service
+      entryPoints:
+        - web
+        - websecure
+      tls:
+        certResolver: letsencrypt
+
+  services:
+    jf-service:
+      failover:
+        healthCheck: {}
+        service: jf-first-service
+        fallback: jf-second-service
+    jf-first-service:
+      loadBalancer:
+        healthCheck:
+          path: http://192.168.1.2:8096/health
+          interval: 10s
+          timeout: 3s
+        servers:
+          - url: "http://192.168.1.2:8096"
+    jf-second-service:
+      loadBalancer:
+        healthCheck:
+          path: http://192.168.1.3:8096/health
+          interval: 10s
+          timeout: 3s
+        servers:
+          - url: "http://192.168.1.3:8096"
+    ha-service:
+      loadBalancer:
+        sticky:
+          cookie:
+            name: homeassistant
+            secure: true
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.4:8123"
+    mealie-service:
+      loadBalancer:
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.5:9925"
+    nextcloud-service:
+      loadBalancer:
+        sticky:
+          cookie:
+            name: nextcloud
+            secure: true
+        passHostHeader: true
+        servers:
+          - url: "http://192.168.1.6:8100"