optionally generate traefik files, set cors in config, and set trust proxy in config

install/fs/config.yml

@@ -13,6 +13,11 @@ server:
     session_cookie_name: p_session
     resource_session_cookie_name: p_resource_session
     resource_access_token_param: p_token
+    cors:
+        origins: ["https://{{.DashboardDomain}}"]
+        methods: ["GET", "POST", "PUT", "DELETE", "PATCH"]
+        headers: ["X-CSRF-Token", "Content-Type"]
+        credentials: false
 
 traefik:
     cert_resolver: letsencrypt

install/fs/traefik/dynamic_config.yml

@@ -4,21 +4,6 @@ http:
       redirectScheme:
         scheme: https
         permanent: true
-    cors:
-      headers:
-        accessControlAllowMethods:
-          - GET
-          - PUT
-          - POST
-          - DELETE
-          - PATCH
-        accessControlAllowHeaders:
-          - Content-Type
-          - X-CSRF-Token
-        accessControlAllowOriginList:
-          - https://{{.DashboardDomain}}
-        accessControlAllowCredentials: false
-
 
   routers:
     # HTTP to HTTPS redirect router
@@ -29,7 +14,6 @@ http:
         - web
       middlewares:
         - redirect-to-https
-        - cors
 
     # Next.js router (handles everything except API and WebSocket paths)
     next-router:
@@ -37,8 +21,6 @@ http:
       service: next-service
       entryPoints:
         - websecure
-      middlewares:
-        - cors
       tls:
         certResolver: letsencrypt
 
@@ -48,8 +30,6 @@ http:
       service: api-service
       entryPoints:
         - websecure
-      middlewares:
-        - cors
       tls:
         certResolver: letsencrypt
 
@@ -59,8 +39,6 @@ http:
       service: api-service
       entryPoints:
         - websecure
-      middlewares:
-        - cors
       tls:
         certResolver: letsencrypt
 
@@ -68,9 +46,9 @@ http:
     next-service:
       loadBalancer:
         servers:
-          - url: "http://pangolin:3002"  # Next.js server
+          - url: "http://pangolin:{{.NEXT_PORT}}"  # Next.js server
 
     api-service:
       loadBalancer:
         servers:
-          - url: "http://pangolin:3000"  # API/WebSocket server
+          - url: "http://pangolin:{{.EXTERNAL_PORT}}"  # API/WebSocket server

install/fs/traefik/traefik_config.yml

@@ -4,7 +4,7 @@ api:
 
 providers:
   http:
-    endpoint: "http://pangolin:3001/api/v1/traefik-config"
+    endpoint: "http://pangolin:{{.INTERNAL_PORT}}/api/v1/traefik-config"
     pollInterval: "5s"
   file:
     filename: "/etc/traefik/dynamic_config.yml"