diff --git a/init b/init index 54909d7..9434d20 100755 --- a/init +++ b/init @@ -6,6 +6,8 @@ mkdir tls-data docker network create $TRAEFIK_NETWORK +sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ./tls-data/selfsigned.key -out ./tls-data/selfsigned.crt + docker compose up -d docker compose -f docker-compose-whoami.yml up -d diff --git a/tls.yml b/tls.yml index 76b5727..e6f938d 100644 --- a/tls.yml +++ b/tls.yml @@ -12,18 +12,16 @@ tls: stores: default: defaultCertificate: - certFile: /tls/CF-altogether.at.crt - keyFile: /tls/CF-altogether.at.key + certFile: /tls/selfsigned.crt + keyFile: /tls/selfsigned.key certificates: - - certFile: /tls/CF-altogether.at.crt - keyFile: /tls/CF-altogether.at.key + - certFile: /tls/selfsigned.crt + keyFile: /tls/selfsigned.key - - certFile: /tls/wordpress.localhost.crt - keyFile: /tls/wordpress.localhost.key options: default: clientAuth: # in PEM format. each file can contain multiple CAs. caFiles: - - /tls/server.crt + - /tls/selfsigned.crt clientAuthType: VerifyClientCertIfGiven \ No newline at end of file diff --git a/traefik.yml b/traefik.yml index cf84e14..b1d83c2 100644 --- a/traefik.yml +++ b/traefik.yml @@ -35,9 +35,6 @@ providers: docker: endpoint: "unix:///var/run/docker.sock" exposedByDefault: false - # endpoint: "tcp://dockerproxy:2375" - # swarmMode: false - # network: "socket_proxy" file: watch: true directory: "/etc/traefik/dynamic_conf" @@ -45,6 +42,6 @@ providers: certificatesresolvers: le: acme: - email: "raphy.martin@protonmail.ch" + email: "rama@altogether.at" storage: "/certificates/acme.json" tlschallenge: true \ No newline at end of file