Compare commits

..

3 Commits

3 changed files with 18 additions and 13 deletions

4
.gitignore vendored
View File

@ -1,2 +1,2 @@
.env /.env
le-certs.json /certs.json

View File

@ -1,3 +1,4 @@
---
version: "3" version: "3"
services: services:
@ -11,11 +12,11 @@ services:
# enable Træfik dashboard # enable Træfik dashboard
- --api.dashboard=true - --api.dashboard=true
# configure Let's Encrypt automatic certificates # configure Let's Encrypt automatic certificates
- --certificatesresolvers.letsencrypt.acme.dnschallenge=true - --certificatesresolvers.${TRAEFIK_CERTRESOLVER}.acme.dnschallenge=true
- --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=hetzner - --certificatesresolvers.${TRAEFIK_CERTRESOLVER}.acme.dnschallenge.provider=hetzner
- --certificatesresolvers.letsencrypt.acme.email=${LETSENCRYPT_EMAIL} - --certificatesresolvers.${TRAEFIK_CERTRESOLVER}.acme.email=${LETSENCRYPT_EMAIL}
- --certificatesresolvers.letsencrypt.acme.keytype=RSA4096 - --certificatesresolvers.${TRAEFIK_CERTRESOLVER}.acme.keytype=RSA4096
- --certificatesresolvers.letsencrypt.acme.storage=/le-certs.json - --certificatesresolvers.${TRAEFIK_CERTRESOLVER}.acme.storage=/certs.json
# we listen on both HTTP and HTTPS # we listen on both HTTP and HTTPS
- --entrypoints.http.address=:80 - --entrypoints.http.address=:80
- --entrypoints.https.address=:443 - --entrypoints.https.address=:443
@ -35,7 +36,7 @@ services:
- HETZNER_API_KEY=${HETZNER_API_KEY} - HETZNER_API_KEY=${HETZNER_API_KEY}
labels: labels:
# expose Træfik using Træfik (dashboard) # expose Træfik using Træfik (dashboard)
- traefik.enable=true - traefik.enable=${TRAEFIK_ENABLED}
# configure a global whitelist for my home # configure a global whitelist for my home
- traefik.http.middlewares.dashboard-whitelist.ipwhitelist.sourcerange=${TRAEFIK_DASHBOARD_WHITELIST} - traefik.http.middlewares.dashboard-whitelist.ipwhitelist.sourcerange=${TRAEFIK_DASHBOARD_WHITELIST}
# configure the global redirect middleware # configure the global redirect middleware
@ -57,8 +58,8 @@ services:
- traefik.http.routers.https-${TRAEFIK_ROUTER}.rule=Host(`${TRAEFIK_MATCHRULE}`) - traefik.http.routers.https-${TRAEFIK_ROUTER}.rule=Host(`${TRAEFIK_MATCHRULE}`)
- traefik.http.routers.https-${TRAEFIK_ROUTER}.service=api@internal - traefik.http.routers.https-${TRAEFIK_ROUTER}.service=api@internal
# of course, enable TLS and it's certificate provider # of course, enable TLS and it's certificate provider
- traefik.http.routers.https-${TRAEFIK_ROUTER}.tls=true - traefik.http.routers.https-${TRAEFIK_ROUTER}.tls=${TRAEFIK_TLSENABLED}
- traefik.http.routers.https-${TRAEFIK_ROUTER}.tls.certresolver=letsencrypt - traefik.http.routers.https-${TRAEFIK_ROUTER}.tls.certresolver=${TRAEFIK_CERTRESOLVER}
networks: networks:
- traefik - traefik
ports: ports:
@ -67,7 +68,7 @@ services:
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
- ./config:/config:ro - ./config:/config:ro
- ./le-certs.json:/le-certs.json - ./certs.json:/certs.json
networks: networks:
traefik: traefik:

View File

@ -1,10 +1,14 @@
# General environment
TRAEFIK_VERSION=2.4 TRAEFIK_VERSION=2.4
TRAEFIK_CERTRESOLVER=letsencrypt
TRAEFIK_CONTAINER_NAME=traefik.mydomain.com TRAEFIK_CONTAINER_NAME=traefik.mydomain.com
TRAEFIK_DASHBOARD_WHITELIST=1.2.3.4/24
TRAEFIK_ENABLED=true
TRAEFIK_NETWORK=traefik
TRAEFIK_MATCHRULE=traefik.mydomain.com TRAEFIK_MATCHRULE=traefik.mydomain.com
TRAEFIK_ROUTER=traefik_mydomain_com TRAEFIK_ROUTER=traefik_mydomain_com
TRAEFIK_NETWORK=traefik-proxy
TRAEFIK_PILOT_TOKEN= TRAEFIK_PILOT_TOKEN=
TRAEFIK_DASHBOARD_WHITELIST=1.2.3.4/24 TRAEFIK_TLSENABLED=true
# Certificate provider # Certificate provider
HETZNER_API_KEY= HETZNER_API_KEY=