66161b1566
Sistema NEXUS v3.4 migrado con: Estructura principal: - core/orchestration: Sistema SIMCO + CAPVED (27 directivas, 28 perfiles) - core/catalog: Catalogo de funcionalidades reutilizables - shared/knowledge-base: Base de conocimiento compartida - devtools/scripts: Herramientas de desarrollo - control-plane/registries: Control de servicios y CI/CD - orchestration/: Configuracion de orquestacion de agentes Proyectos incluidos (11): - gamilit (submodule -> GitHub) - trading-platform (OrbiquanTIA) - erp-suite con 5 verticales: - erp-core, construccion, vidrio-templado - mecanicas-diesel, retail, clinicas - betting-analytics - inmobiliaria-analytics - platform_marketing_content - pos-micro, erp-basico Configuracion: - .gitignore completo para Node.js/Python/Docker - gamilit como submodule (git@github.com:rckrdmrd/gamilit-workspace.git) - Sistema de puertos estandarizado (3005-3199) Generated with NEXUS v3.4 Migration System EPIC-010: Configuracion Git y Repositorios
151 lines
4.5 KiB
YAML
151 lines
4.5 KiB
YAML
# ==============================================================================
|
|
# TRAEFIK MIDDLEWARES
|
|
# ==============================================================================
|
|
# Middlewares reutilizables para todos los servicios
|
|
# ==============================================================================
|
|
|
|
http:
|
|
middlewares:
|
|
# ==========================================================================
|
|
# RATE LIMITING
|
|
# ==========================================================================
|
|
rate-limit:
|
|
rateLimit:
|
|
average: 100
|
|
burst: 50
|
|
period: 1s
|
|
|
|
rate-limit-strict:
|
|
rateLimit:
|
|
average: 10
|
|
burst: 20
|
|
period: 1s
|
|
|
|
# ==========================================================================
|
|
# CORS
|
|
# ==========================================================================
|
|
cors-all:
|
|
headers:
|
|
accessControlAllowMethods:
|
|
- GET
|
|
- POST
|
|
- PUT
|
|
- PATCH
|
|
- DELETE
|
|
- OPTIONS
|
|
accessControlAllowOriginList:
|
|
- "*"
|
|
accessControlAllowHeaders:
|
|
- "*"
|
|
accessControlMaxAge: 100
|
|
addVaryHeader: true
|
|
|
|
cors-restricted:
|
|
headers:
|
|
accessControlAllowMethods:
|
|
- GET
|
|
- POST
|
|
- PUT
|
|
- DELETE
|
|
- OPTIONS
|
|
accessControlAllowOriginListRegex:
|
|
- "^https?://.*\\.localhost$"
|
|
- "^https?://.*\\.example\\.com$"
|
|
accessControlAllowHeaders:
|
|
- Authorization
|
|
- Content-Type
|
|
- X-Requested-With
|
|
accessControlAllowCredentials: true
|
|
|
|
# ==========================================================================
|
|
# SECURITY HEADERS
|
|
# ==========================================================================
|
|
security-headers:
|
|
headers:
|
|
frameDeny: true
|
|
browserXssFilter: true
|
|
contentTypeNosniff: true
|
|
referrerPolicy: "strict-origin-when-cross-origin"
|
|
customResponseHeaders:
|
|
X-Robots-Tag: "noindex,nofollow"
|
|
|
|
security-headers-strict:
|
|
headers:
|
|
frameDeny: true
|
|
browserXssFilter: true
|
|
contentTypeNosniff: true
|
|
stsSeconds: 31536000
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
referrerPolicy: "strict-origin-when-cross-origin"
|
|
|
|
# ==========================================================================
|
|
# COMPRESSION
|
|
# ==========================================================================
|
|
compress:
|
|
compress: {}
|
|
|
|
# ==========================================================================
|
|
# RETRY
|
|
# ==========================================================================
|
|
retry:
|
|
retry:
|
|
attempts: 3
|
|
initialInterval: 100ms
|
|
|
|
# ==========================================================================
|
|
# CIRCUIT BREAKER
|
|
# ==========================================================================
|
|
circuit-breaker:
|
|
circuitBreaker:
|
|
expression: "NetworkErrorRatio() > 0.5"
|
|
|
|
# ==========================================================================
|
|
# STRIP PREFIX (para APIs)
|
|
# ==========================================================================
|
|
strip-api-prefix:
|
|
stripPrefix:
|
|
prefixes:
|
|
- "/api"
|
|
|
|
# ==========================================================================
|
|
# ADD PREFIX
|
|
# ==========================================================================
|
|
add-api-prefix:
|
|
addPrefix:
|
|
prefix: "/api"
|
|
|
|
# ==========================================================================
|
|
# BASIC AUTH (para dashboards)
|
|
# ==========================================================================
|
|
# Generar password: htpasswd -nb admin password
|
|
# basic-auth:
|
|
# basicAuth:
|
|
# users:
|
|
# - "admin:$apr1$..."
|
|
|
|
# ==========================================================================
|
|
# CHAINS (combinaciones comunes)
|
|
# ==========================================================================
|
|
api-chain:
|
|
chain:
|
|
middlewares:
|
|
- rate-limit
|
|
- cors-all
|
|
- security-headers
|
|
- compress
|
|
|
|
web-chain:
|
|
chain:
|
|
middlewares:
|
|
- security-headers
|
|
- compress
|
|
|
|
secure-chain:
|
|
chain:
|
|
middlewares:
|
|
- rate-limit-strict
|
|
- cors-restricted
|
|
- security-headers-strict
|
|
- compress
|