DelugeVPN¶

Description / name	Input element
Your domain name

Overview¶

DelugeVPN is a VPN version of Deluge with OpenVPN to ensure a secure and private connection to the Internet, including use of iptables to prevent IP leakage when the tunnel is down.

Manual

Releases

Community

Deployment¶

sb install sandbox-delugevpn

Usage¶

Visit https://delugevpn.iYOUR_DOMAIN_NAMEi.

Basics¶

See the parent Deluge role for app setup.

Edit the DelugeVPN settings in the delugevpn section in Sandbox settings.yml as shown below.

 delugevpn:
   vpn_endpoint: netherlands.ovpn
   vpn_pass: your_vpn_password
   vpn_prov: pia
   vpn_user: your_vpn_username
   vpn_client: wireguard # 'wireguard' or 'openvpn'

For Private Internet Access

Add your user name and password
Change the vpn_endpoint to your chosen server. Note that PIA occasionally changes which servers have port forwarding. The Netherlands server no longer offers port forwarding. See configuration section for more details.

For other VPN providers

Add your user name and password
Change vpn_prov to custom
Leave vpn_endpoint as netherlands.ovpn
Follow step 2 below then immediately follow step 3

Run the DelugeVPN Role¶

sb install sandbox-delugevpn

Configuring Server for Custom VPN providers (only for non-pia)**¶

Why you need to do this

For custom VPN providers, delugevpn needs an ovpn file to complete the install properly. It can check for a custom file in the /opt/delugevpn/openvpn folder, but this folder does not yet exist. Therefore, we will first use PIA's netherlands.ovpn file, which we will modify later to have our own VPN provider details.

The steps above have created some files in /opt/delugevpn/openvpn.

ca.rsa.2048.crt - Leave this
crl.rsa.2048.pem - Leave this
credentials.conf - Leave this. Your VPN username and password are stored here.
netherlands.ovpn - Your server details are stored here. We will change this.

docker stop delugevpn
cd /opt/delugevpn/openvpn
rm netherlands.ovpn

Now you can upload your own .ovpn file from your VPN provider, renamed as netherlands.ovpn. If your VPN provider has also included a ca.crt file, upload that file as well. Upload one or both files into /opt/delugevpn/openvpn.

Note¶

Do not rename the original netherlands.ovpn file if you're using Filezilla. delugevpn will automatically use the renamed file instead of netherlands.ovpn and your newly uploaded .ovpn file will still be ignored.

Now you can restart the docker

docker start delugevpn

Configuration¶

FOR PIA¶

vpn_user: Your PIA user name
vpn_pass: Your PIA password
vpn_prov: pia
vpn_endpoint: netherlands.ovpn

Included PIA OpenVPN end point options are.

Endpoint	Endpoint	Endpoint	Endpoint
albania.ovpn	egypt.ovpn	monaco.ovpn	uk_london.ovp
algeria.ovpn	finland.ovpn	mongolia.ovpn	uk_manchester.ovpn
andorra.ovpn	france.ovpn	montenegro.ovpn	uk_southampton.ovpn
argentina.ovpn	georgia.ovpn	morocco.ovpn	ukraine.ovpn
armenia.ovpn	greece.ovpn	netherlands.ovpn	united_arab_emirates.ovpn
au_melbourne.ovpn	greenland.ovpn	new_zealand.ovpn	us_atlanta.ovpn
au_perth.ovpn	hong_kong.ovpn	nigeria.ovpn	us_california.ovpn
au_sydney.ovpn	hungary.ovpn	norway.ovpn	us_chicago.ovpn
austria.ovpn	iceland.ovpn	panama.ovpn	us_denver.ovpn
bahamas.ovpn	india.ovpn	philippines.ovpn	us_east.ovpn
bangladesh.ovpn	ireland.ovpn	poland.ovpn	us_florida.ovpn
belgium.ovpn	isle_of_man.ovpn	portugal.ovpn	us_houston.ovpn
brazil.ovpn	israel.ovpn	qatar.ovpn	us_las_vegas.ovpn
bulgaria.ovpn	italy.ovpn	romania.ovpn	us_new_york.ovpn
ca_montreal.ovpn	japan.ovpn	saudi_arabia.ovpn	us_seattle.ovpn
ca_ontario.ovpn	kazakhstan.ovpn	serbia.ovpn	us_silicon_valley.ovpn
ca_toronto.ovpn	latvia.ovpn	singapore.ovpn	us_texas.ovpn
ca_vancouver.ovpn	liechtenstein.ovpn	slovakia.ovpn	us_washington_dc.ovpn
cambodia.ovpn	lithuania.ovpn	south_africa.ovpn	us_west.ovpn
china.ovpn	luxembourg.ovpn	spain.ovpn	venezuela.ovpn
cyprus.ovpn	macao.ovpn	sri_lanka.ovpn	vietnam.ovpn
czech_republic.ovpn	macedonia.ovpn	sweden.ovpn
de_berlin.ovpn	malta.ovpn	switzerland.ovpn
de_frankfurt.ovpn	mexico.ovpn	taiwan.ovpn
denmark.ovpn	moldova.ovpn	turkey.ovpn

As of July 4, 2020, the PIA servers that allow port forwarding, and DelugeVPN to work properly, are: CA Toronto, CA Montreal, CA Vancouver, Czech Republic, DE Berlin, DE Frankfurt, France, Israel, Romania, Spain, Switzerland, Sweden. Check the PIA website for changes if these servers do not work.

Tips¶

If you run into issues check settings.yml modified during pre install setup.
If your endpoint has spaces you can use single quotes in the settings.yml ex.) vpn_endpoint: 'CA Toronto.ovpn'
After checking/fixing settings.yml execute sudo rm -rf /opt/delugevpn
WARNING: this will delete all files and folder in /opt/delugevpn, backup first if you need anything)
Follow installation steps above again

For app specific instructions refer to the parent role¶

Deluge

Role Defaults¶

Use the Inventory to customize variables. (1)

Example override
```
delugevpn_name: "custom_value"
```
Avoid overriding variables ending in _default

When overriding variables that end in _default (like delugevpn_docker_envs_default), you replace the entire default configuration. Future updates that add new default values will not be applied to your setup, potentially breaking functionality.

Instead, use the corresponding _custom variable (like delugevpn_docker_envs_custom) to add your changes. Custom values are merged with defaults, ensuring you receive updates.

BasicsSettingsWebDNSTraefikDockerDocker+Global Override Options

delugevpn_name

# Type: string
delugevpn_name: delugevpn

delugevpn_role_log_level_daemon

# https://github.com/binhex/arch-delugevpn for options
# Type: string
delugevpn_role_log_level_daemon: info

delugevpn_role_log_level_web

# Type: string
delugevpn_role_log_level_web: info

delugevpn_role_name_servers

# Type: string
delugevpn_role_name_servers: "84.200.69.80,1.1.1.1,84.200.70.40,1.0.0.1"

delugevpn_role_lan_network

# Type: string
delugevpn_role_lan_network: "172.19.0.0/16"

delugevpn_role_vpn_user

# Type: string
delugevpn_role_vpn_user: ""

delugevpn_role_vpn_pass

# Type: string
delugevpn_role_vpn_pass: ""

delugevpn_role_vpn_prov

# Type: string
delugevpn_role_vpn_prov: "pia"

delugevpn_role_vpn_client

# Type: string
delugevpn_role_vpn_client: "wireguard"

delugevpn_role_web_subdomain

# Type: string
delugevpn_role_web_subdomain: "{{ delugevpn_name }}"

delugevpn_role_web_domain

# Type: string
delugevpn_role_web_domain: "{{ user.domain }}"

delugevpn_role_web_port

# Type: string
delugevpn_role_web_port: "8112"

delugevpn_role_web_url

# Type: string
delugevpn_role_web_url: "{{ 'https://' + (lookup('role_var', '_web_subdomain', role='delugevpn') + '.' + lookup('role_var', '_web_domain', role='delugevpn')
                         if (lookup('role_var', '_web_subdomain', role='delugevpn') | length > 0)
                         else lookup('role_var', '_web_domain', role='delugevpn')) }}"

delugevpn_role_dns_record

# Type: string
delugevpn_role_dns_record: "{{ lookup('role_var', '_web_subdomain', role='delugevpn') }}"

delugevpn_role_dns_zone

# Type: string
delugevpn_role_dns_zone: "{{ lookup('role_var', '_web_domain', role='delugevpn') }}"

delugevpn_role_dns_proxy

# Type: bool (true/false)
delugevpn_role_dns_proxy: "{{ dns_proxied }}"

delugevpn_role_traefik_sso_middleware

# Type: string
delugevpn_role_traefik_sso_middleware: ""

delugevpn_role_traefik_middleware_default

# Type: string
delugevpn_role_traefik_middleware_default: "{{ traefik_default_middleware }}"

delugevpn_role_traefik_middleware_custom

# Type: string
delugevpn_role_traefik_middleware_custom: ""

delugevpn_role_traefik_certresolver

# Type: string
delugevpn_role_traefik_certresolver: "{{ traefik_default_certresolver }}"

delugevpn_role_traefik_enabled

# Type: bool (true/false)
delugevpn_role_traefik_enabled: true

delugevpn_role_traefik_api_enabled

# Type: bool (true/false)
delugevpn_role_traefik_api_enabled: false

delugevpn_role_traefik_api_endpoint

# Type: string
delugevpn_role_traefik_api_endpoint: ""

Container

delugevpn_role_docker_container

# Type: string
delugevpn_role_docker_container: "{{ delugevpn_name }}"

Image

delugevpn_role_docker_image_pull

# Type: bool (true/false)
delugevpn_role_docker_image_pull: true

delugevpn_role_docker_image_repo

# Type: string
delugevpn_role_docker_image_repo: "binhex/arch-delugevpn"

delugevpn_role_docker_image_tag

# Type: string
delugevpn_role_docker_image_tag: "latest"

delugevpn_role_docker_image

# Type: string
delugevpn_role_docker_image: "{{ lookup('role_var', '_docker_image_repo', role='delugevpn') }}:{{ lookup('role_var', '_docker_image_tag', role='delugevpn') }}"

Ports

delugevpn_role_docker_ports_default

# Type: list
delugevpn_role_docker_ports_default:
  - "58112:58112"
  - "58846:58846"

delugevpn_role_docker_ports_custom

# Type: list
delugevpn_role_docker_ports_custom: []

Envs

delugevpn_role_docker_envs_default

# Type: dict
delugevpn_role_docker_envs_default:
  DEBUG: "false"
  DELUGE_DAEMON_LOG_LEVEL: "{{ lookup('role_var', '_log_level_daemon', role='delugevpn') }}"
  DELUGE_WEB_LOG_LEVEL: "{{ lookup('role_var', '_log_level_web', role='delugevpn') }}"
  ENABLE_PRIVOXY: "no"
  LAN_NETWORK: "{{ lookup('role_var', '_lan_network', role='delugevpn') }}"
  NAME_SERVERS: "{{ lookup('role_var', '_name_servers', role='delugevpn') }}"
  PGID: "{{ gid }}"
  PUID: "{{ uid }}"
  STRICT_PORT_FORWARD: "yes"
  TZ: "{{ tz }}"
  UMASK: "022"
  VPN_CLIENT: "{{ lookup('role_var', '_vpn_client', role='delugevpn') }}"
  VPN_ENABLED: "yes"
  VPN_PASS: "{{ lookup('role_var', '_vpn_pass', role='delugevpn') }}"
  VPN_PROV: "{{ lookup('role_var', '_vpn_prov', role='delugevpn') }}"
  VPN_USER: "{{ lookup('role_var', '_vpn_user', role='delugevpn') }}"

delugevpn_role_docker_envs_custom

# Type: dict
delugevpn_role_docker_envs_custom: {}

Volumes

delugevpn_role_docker_volumes_default

# Type: list
delugevpn_role_docker_volumes_default:
  - "{{ lookup('role_var', '_paths_location', role='delugevpn') }}:/config"
  - "/etc/localtime:/etc/localtime:ro"
  - "{{ server_appdata_path }}/scripts:/scripts"

delugevpn_role_docker_volumes_custom

# Type: list
delugevpn_role_docker_volumes_custom: []

Hostname

delugevpn_role_docker_hostname

# Type: string
delugevpn_role_docker_hostname: "{{ delugevpn_name }}"

Networks

delugevpn_role_docker_networks_alias

# Type: string
delugevpn_role_docker_networks_alias: "{{ delugevpn_name }}"

delugevpn_role_docker_networks_default

# Type: list
delugevpn_role_docker_networks_default: []

delugevpn_role_docker_networks_custom

# Type: list
delugevpn_role_docker_networks_custom: []

Restart Policy

delugevpn_role_docker_restart_policy

# Type: string
delugevpn_role_docker_restart_policy: unless-stopped

State

delugevpn_role_docker_state

# Type: string
delugevpn_role_docker_state: started

Sysctls

delugevpn_role_docker_sysctls

# Type: dict
delugevpn_role_docker_sysctls:
  net.ipv4.conf.all.src_valid_mark: "1"

Privileged

delugevpn_role_docker_privileged

# Type: bool (true/false)
delugevpn_role_docker_privileged: true

The following advanced options are available via create_docker_container but are not defined in the role. See: docker_container module

Resource Limits

delugevpn_role_docker_blkio_weight

# Type: int
delugevpn_role_docker_blkio_weight:

delugevpn_role_docker_cpu_period

# Type: int
delugevpn_role_docker_cpu_period:

delugevpn_role_docker_cpu_quota

# Type: int
delugevpn_role_docker_cpu_quota:

delugevpn_role_docker_cpu_shares

# Type: int
delugevpn_role_docker_cpu_shares:

delugevpn_role_docker_cpus

# Type: string
delugevpn_role_docker_cpus:

delugevpn_role_docker_cpuset_cpus

# Type: string
delugevpn_role_docker_cpuset_cpus:

delugevpn_role_docker_cpuset_mems

# Type: string
delugevpn_role_docker_cpuset_mems:

delugevpn_role_docker_kernel_memory

# Type: string
delugevpn_role_docker_kernel_memory:

delugevpn_role_docker_memory

# Type: string
delugevpn_role_docker_memory:

delugevpn_role_docker_memory_reservation

# Type: string
delugevpn_role_docker_memory_reservation:

delugevpn_role_docker_memory_swap

# Type: string
delugevpn_role_docker_memory_swap:

delugevpn_role_docker_memory_swappiness

# Type: int
delugevpn_role_docker_memory_swappiness:

delugevpn_role_docker_shm_size

# Type: string
delugevpn_role_docker_shm_size:

Security & Devices

delugevpn_role_docker_cap_drop

# Type: list
delugevpn_role_docker_cap_drop:

delugevpn_role_docker_cgroupns_mode

# Type: string
delugevpn_role_docker_cgroupns_mode:

delugevpn_role_docker_device_cgroup_rules

# Type: list
delugevpn_role_docker_device_cgroup_rules:

delugevpn_role_docker_device_read_bps

# Type: list
delugevpn_role_docker_device_read_bps:

delugevpn_role_docker_device_read_iops

# Type: list
delugevpn_role_docker_device_read_iops:

delugevpn_role_docker_device_requests

# Type: list
delugevpn_role_docker_device_requests:

delugevpn_role_docker_device_write_bps

# Type: list
delugevpn_role_docker_device_write_bps:

delugevpn_role_docker_device_write_iops

# Type: list
delugevpn_role_docker_device_write_iops:

delugevpn_role_docker_devices

# Type: list
delugevpn_role_docker_devices:

delugevpn_role_docker_devices_default

# Type: string
delugevpn_role_docker_devices_default:

delugevpn_role_docker_groups

# Type: list
delugevpn_role_docker_groups:

delugevpn_role_docker_security_opts

# Type: list
delugevpn_role_docker_security_opts:

delugevpn_role_docker_user

# Type: string
delugevpn_role_docker_user:

delugevpn_role_docker_userns_mode

# Type: string
delugevpn_role_docker_userns_mode:

Networking

delugevpn_role_docker_dns_opts

# Type: list
delugevpn_role_docker_dns_opts:

delugevpn_role_docker_dns_search_domains

# Type: list
delugevpn_role_docker_dns_search_domains:

delugevpn_role_docker_dns_servers

# Type: list
delugevpn_role_docker_dns_servers:

delugevpn_role_docker_domainname

# Type: string
delugevpn_role_docker_domainname:

delugevpn_role_docker_exposed_ports

# Type: list
delugevpn_role_docker_exposed_ports:

delugevpn_role_docker_hosts

# Type: dict
delugevpn_role_docker_hosts:

delugevpn_role_docker_hosts_use_common

# Type: bool (true/false)
delugevpn_role_docker_hosts_use_common:

delugevpn_role_docker_ipc_mode

# Type: string
delugevpn_role_docker_ipc_mode:

delugevpn_role_docker_links

# Type: list
delugevpn_role_docker_links:

delugevpn_role_docker_network_mode

# Type: string
delugevpn_role_docker_network_mode:

delugevpn_role_docker_pid_mode

# Type: string
delugevpn_role_docker_pid_mode:

delugevpn_role_docker_uts

# Type: string
delugevpn_role_docker_uts:

Storage

delugevpn_role_docker_keep_volumes

# Type: bool (true/false)
delugevpn_role_docker_keep_volumes:

delugevpn_role_docker_mounts

# Type: list
delugevpn_role_docker_mounts:

delugevpn_role_docker_storage_opts

# Type: dict
delugevpn_role_docker_storage_opts:

delugevpn_role_docker_tmpfs

# Type: list
delugevpn_role_docker_tmpfs:

delugevpn_role_docker_volume_driver

# Type: string
delugevpn_role_docker_volume_driver:

delugevpn_role_docker_volumes_from

# Type: list
delugevpn_role_docker_volumes_from:

delugevpn_role_docker_volumes_global

# Type: bool (true/false)
delugevpn_role_docker_volumes_global:

delugevpn_role_docker_working_dir

# Type: string
delugevpn_role_docker_working_dir:

Monitoring & Lifecycle

delugevpn_role_docker_auto_remove

# Type: bool (true/false)
delugevpn_role_docker_auto_remove:

delugevpn_role_docker_cleanup

# Type: bool (true/false)
delugevpn_role_docker_cleanup:

delugevpn_role_docker_force_kill

# Type: string
delugevpn_role_docker_force_kill:

delugevpn_role_docker_healthcheck

# Type: dict
delugevpn_role_docker_healthcheck:

delugevpn_role_docker_healthy_wait_timeout

# Type: int
delugevpn_role_docker_healthy_wait_timeout:

delugevpn_role_docker_init

# Type: bool (true/false)
delugevpn_role_docker_init:

delugevpn_role_docker_kill_signal

# Type: string
delugevpn_role_docker_kill_signal:

delugevpn_role_docker_log_driver

# Type: string
delugevpn_role_docker_log_driver:

delugevpn_role_docker_log_options

# Type: dict
delugevpn_role_docker_log_options:

delugevpn_role_docker_oom_killer

# Type: bool (true/false)
delugevpn_role_docker_oom_killer:

delugevpn_role_docker_oom_score_adj

# Type: int
delugevpn_role_docker_oom_score_adj:

delugevpn_role_docker_output_logs

# Type: bool (true/false)
delugevpn_role_docker_output_logs:

delugevpn_role_docker_paused

# Type: bool (true/false)
delugevpn_role_docker_paused:

delugevpn_role_docker_recreate

# Type: bool (true/false)
delugevpn_role_docker_recreate:

delugevpn_role_docker_restart_retries

# Type: int
delugevpn_role_docker_restart_retries:

delugevpn_role_docker_stop_timeout

# Type: int
delugevpn_role_docker_stop_timeout:

Other Options

delugevpn_role_docker_capabilities

# Type: list
delugevpn_role_docker_capabilities:

delugevpn_role_docker_cgroup_parent

# Type: string
delugevpn_role_docker_cgroup_parent:

delugevpn_role_docker_commands

# Type: list
delugevpn_role_docker_commands:

delugevpn_role_docker_create_timeout

# Type: int
delugevpn_role_docker_create_timeout:

delugevpn_role_docker_entrypoint

# Type: string
delugevpn_role_docker_entrypoint:

delugevpn_role_docker_env_file

# Type: string
delugevpn_role_docker_env_file:

delugevpn_role_docker_labels

# Type: dict
delugevpn_role_docker_labels:

delugevpn_role_docker_labels_use_common

# Type: bool (true/false)
delugevpn_role_docker_labels_use_common:

delugevpn_role_docker_read_only

# Type: bool (true/false)
delugevpn_role_docker_read_only:

delugevpn_role_docker_runtime

# Type: string
delugevpn_role_docker_runtime:

delugevpn_role_docker_ulimits

# Type: list
delugevpn_role_docker_ulimits:

delugevpn_role_autoheal_enabled

# Enable or disable Autoheal monitoring for the container created when deploying
# Type: bool (true/false)
delugevpn_role_autoheal_enabled: true

delugevpn_role_depends_on

# List of container dependencies that must be running before the container start
# Type: string
delugevpn_role_depends_on: ""

delugevpn_role_depends_on_delay

# Delay in seconds before starting the container after dependencies are ready
# Type: string (quoted number)
delugevpn_role_depends_on_delay: "0"

delugevpn_role_depends_on_healthchecks

# Enable healthcheck waiting for container dependencies
# Type: string ("true"/"false")
delugevpn_role_depends_on_healthchecks:

delugevpn_role_diun_enabled

# Enable or disable Diun update notifications for the container created when deploying
# Type: bool (true/false)
delugevpn_role_diun_enabled: true

delugevpn_role_dns_enabled

# Enable or disable automatic DNS record creation for the container
# Type: bool (true/false)
delugevpn_role_dns_enabled: true

delugevpn_role_docker_controller

# Enable or disable Saltbox Docker Controller management for the container
# Type: bool (true/false)
delugevpn_role_docker_controller: true

delugevpn_role_docker_image_repo

# Type: string
delugevpn_role_docker_image_repo:

delugevpn_role_docker_image_tag

# Type: string
delugevpn_role_docker_image_tag:

delugevpn_role_docker_volumes_download

# Type: bool (true/false)
delugevpn_role_docker_volumes_download:

delugevpn_role_lan_network

# Type: string
delugevpn_role_lan_network:

delugevpn_role_log_level_daemon

# Type: string
delugevpn_role_log_level_daemon:

delugevpn_role_log_level_web

# Type: string
delugevpn_role_log_level_web:

delugevpn_role_name_servers

# Type: string
delugevpn_role_name_servers:

delugevpn_role_paths_location

# Type: string
delugevpn_role_paths_location:

delugevpn_role_themepark_addons

# Type: string
delugevpn_role_themepark_addons:

delugevpn_role_themepark_app

# Type: string
delugevpn_role_themepark_app:

delugevpn_role_themepark_theme

# Type: string
delugevpn_role_themepark_theme:

delugevpn_role_traefik_api_endpoint

# Type: dict/omit
delugevpn_role_traefik_api_endpoint:

delugevpn_role_traefik_api_middleware

# Type: string
delugevpn_role_traefik_api_middleware:

delugevpn_role_traefik_api_middleware_http

# Type: string
delugevpn_role_traefik_api_middleware_http:

delugevpn_role_traefik_autodetect_enabled

# Enable Traefik autodetect middleware for the container
# Type: bool (true/false)
delugevpn_role_traefik_autodetect_enabled: false

delugevpn_role_traefik_certresolver

# Type: string
delugevpn_role_traefik_certresolver:

delugevpn_role_traefik_crowdsec_enabled

# Enable CrowdSec middleware for the container
# Type: bool (true/false)
delugevpn_role_traefik_crowdsec_enabled: false

delugevpn_role_traefik_error_pages_enabled

# Enable custom error pages middleware for the container
# Type: bool (true/false)
delugevpn_role_traefik_error_pages_enabled: false

delugevpn_role_traefik_gzip_enabled

# Enable gzip compression middleware for the container
# Type: bool (true/false)
delugevpn_role_traefik_gzip_enabled: false

delugevpn_role_traefik_middleware_http

# Type: string
delugevpn_role_traefik_middleware_http:

delugevpn_role_traefik_middleware_http_api_insecure

# Type: bool (true/false)
delugevpn_role_traefik_middleware_http_api_insecure:

delugevpn_role_traefik_middleware_http_insecure

# Type: bool (true/false)
delugevpn_role_traefik_middleware_http_insecure:

delugevpn_role_traefik_priority

# Type: string
delugevpn_role_traefik_priority:

delugevpn_role_traefik_robot_enabled

# Enable robots.txt middleware for the container
# Type: bool (true/false)
delugevpn_role_traefik_robot_enabled: true

delugevpn_role_traefik_tailscale_enabled

# Enable Tailscale-specific Traefik configuration for the container
# Type: bool (true/false)
delugevpn_role_traefik_tailscale_enabled: false

delugevpn_role_traefik_wildcard_enabled

# Enable wildcard certificate for the container
# Type: bool (true/false)
delugevpn_role_traefik_wildcard_enabled: true

delugevpn_role_vpn_client

# Type: string
delugevpn_role_vpn_client:

delugevpn_role_vpn_pass

# Type: string
delugevpn_role_vpn_pass:

delugevpn_role_vpn_prov

# Type: string
delugevpn_role_vpn_prov:

delugevpn_role_vpn_user

# Type: string
delugevpn_role_vpn_user:

delugevpn_role_web_domain

# Type: string
delugevpn_role_web_domain:

delugevpn_role_web_fqdn_override

# Override the Traefik fully qualified domain name (FQDN) for the container
# Type: list
delugevpn_role_web_fqdn_override:

Example Override

delugevpn_role_web_fqdn_override:
  - "{{ traefik_host }}"
  - "delugevpn2.{{ user.domain }}"
  - "delugevpn.otherdomain.tld"

Note: Include {{ traefik_host }} to preserve the default FQDN alongside your custom entries

delugevpn_role_web_host_override

# Override the Traefik web host configuration for the container
# Type: string
delugevpn_role_web_host_override:

Example Override

delugevpn_role_web_host_override: "Host(`{{ traefik_host }}`) || Host(`{{ 'delugevpn2.' + user.domain }}`)"

Note: Use {{ traefik_host }} to include the default host configuration in your custom rule

delugevpn_role_web_http_port

# Type: string (quoted number)
delugevpn_role_web_http_port:

delugevpn_role_web_http_scheme

# Type: string ("http"/"https")
delugevpn_role_web_http_scheme:

delugevpn_role_web_http_serverstransport

# Type: dict/omit
delugevpn_role_web_http_serverstransport:

delugevpn_role_web_scheme

# URL scheme to use for web access to the container
# Type: string ("http"/"https")
delugevpn_role_web_scheme:

delugevpn_role_web_serverstransport

# Type: dict/omit
delugevpn_role_web_serverstransport:

delugevpn_role_web_subdomain

# Type: string
delugevpn_role_web_subdomain: