monte Posts - Answer Overflow

monte

Explore posts from servers

•Created by monte on 3/29/2025 in #old-help

expose only a specific endpoint to internet

I have a backend service, of which I want to expose only one endpoint to the internet while rest of the endpoints should be accessible internally. How can I achieve this with traefik labels in docker-compose? E.g: I have api.saral.club , this should be accessible by other internal services like frontend. The frontend is deployed as a separate project in the separate container, but in the same dokploy project. The backend is deployed using docker-compose, and it has one additional service apart from fastapi server. I want the endpoint api.saral.club/payment-webhook to be publicaly accessible from the internet but rest of the endpoints should stay in private. Here's my docker-compose:

services:
  backend:
    build:
      context: .
      target: webapp
    expose:
      - 8000
    depends_on:
      celery-worker:
        condition: service_healthy

    labels:
      - "traefik.http.services.backend-svc.loadbalancer.server.port=8000"
      - "traefik.enable=true"
      - "traefik.http.routers.backend-public.rule=Host(`api.saral.club`) && PathPrefix(`/mnemonics/v1/info`)"
      - "traefik.http.routers.backend-public.entrypoint=websecure"
      - "traefik.http.routers.backend-public.tls.certresolver=letsencrypt"
      - "traefik.http.routers.backend-public.priority=100"
      - "traefik.http.routers.backend-public.service=backend-svc"
      - "traefik.http.routers.backend-internal.rule=Host(`api.saral.club`)"
      - "traefik.http.routers.backend-internal.entrypoints=websecure"
      - "traefik.http.routers.backend-internal.tls.certresolver=letsencrypt"
      - "traefik.http.routers.backend-internal.service=backend-svc"
      - "traefik.http.routers.backend-internal.middlewares=internal-only"
      - "traefik.http.routers.backend-internal.priority=10"
      - "traefik.http.middlewares.internal-only.ipwhitelist.sourcerange=172.16.0.0/12,192.168.0.0/16,10.0.0.0/8"
    networks:
      - dokploy-network
      - default

services:
  backend:
    build:
      context: .
      target: webapp
    expose:
      - 8000
    depends_on:
      celery-worker:
        condition: service_healthy

    labels:
      - "traefik.http.services.backend-svc.loadbalancer.server.port=8000"
      - "traefik.enable=true"
      - "traefik.http.routers.backend-public.rule=Host(`api.saral.club`) && PathPrefix(`/mnemonics/v1/info`)"
      - "traefik.http.routers.backend-public.entrypoint=websecure"
      - "traefik.http.routers.backend-public.tls.certresolver=letsencrypt"
      - "traefik.http.routers.backend-public.priority=100"
      - "traefik.http.routers.backend-public.service=backend-svc"
      - "traefik.http.routers.backend-internal.rule=Host(`api.saral.club`)"
      - "traefik.http.routers.backend-internal.entrypoints=websecure"
      - "traefik.http.routers.backend-internal.tls.certresolver=letsencrypt"
      - "traefik.http.routers.backend-internal.service=backend-svc"
      - "traefik.http.routers.backend-internal.middlewares=internal-only"
      - "traefik.http.routers.backend-internal.priority=10"
      - "traefik.http.middlewares.internal-only.ipwhitelist.sourcerange=172.16.0.0/12,192.168.0.0/16,10.0.0.0/8"
    networks:
      - dokploy-network
      - default

1 replies

DDokploy

•Created by monte on 2/5/2025 in #old-help

Connecting backend to frontend

Hi, I have a backend service, which uses docker-compose to deploy. I was able to successfully deploy it to dokploy. This service has a fastapi webserver, which i would like to expose as api.myproject.com. I would like to keep this webserver internal only and not expose to public, such that only frontend is allowed to talk to it. The frontend is deployed as an application on the same vps. What changes do i need to make to make this work? If there is any guidebook/examples, that would be really helpful. Both the backend and frontend are separate git repos. Thanks for time and efforts.

77 replies

KKinde

•Created by monte on 1/24/2025 in #💻┃support

Where to pass `KINDE_REDIRECT_URL` instead of defining in `.env` file?

Hi, I am using sveltekit, I have gone through, kinde's sveltekit guide, in the document, it is mentioned to put such variables in .env file. (Variables like: KINDE_REDIRECT_URL, KINDE_POST_LOGOUT_REDIRECT_URL etc etc). Is there a way to not put these variables in .env file and pass it to the kinde client? (Reference: https://docs.kinde.com/developer-tools/sdks/backend/sveltekit-sdk/#configure-your-app)

2 replies

Gaming

Programming