bisco/loadbalancer
1
0
Fork 0
generated from bisco/codex-bootstrap
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add http challenge routing

Browse Source
This commit is contained in:
Alfredo Di Stasio
2026-06-30 10:09:35 +02:00
parent b5beb27623
commit f3759e76ea
11 changed files with 78 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/security.md
+3 -1
View File
@@ -13,7 +13,9 @@ Backend services are responsible for:
## Network exposure
Only `443/tcp` is published by Compose. The Traefik ping entrypoint listens inside the container for healthchecks and is not published on the host.
Compose publishes `80/tcp` for HTTP-01 certificate challenges and `443/tcp` for TLS passthrough traffic. The Traefik ping entrypoint listens inside the container for healthchecks and is not published on the host.
The HTTP routers only match `/.well-known/acme-challenge/` paths for configured hostnames.
## Container hardening