append selfsigned cert creation
This commit is contained in:
parent
cd63ad4a55
commit
938009c86d
2
init
2
init
@ -6,6 +6,8 @@ mkdir tls-data
|
|||||||
|
|
||||||
docker network create $TRAEFIK_NETWORK
|
docker network create $TRAEFIK_NETWORK
|
||||||
|
|
||||||
|
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ./tls-data/selfsigned.key -out ./tls-data/selfsigned.crt
|
||||||
|
|
||||||
docker compose up -d
|
docker compose up -d
|
||||||
docker compose -f docker-compose-whoami.yml up -d
|
docker compose -f docker-compose-whoami.yml up -d
|
||||||
|
|
||||||
|
12
tls.yml
12
tls.yml
@ -12,18 +12,16 @@ tls:
|
|||||||
stores:
|
stores:
|
||||||
default:
|
default:
|
||||||
defaultCertificate:
|
defaultCertificate:
|
||||||
certFile: /tls/CF-altogether.at.crt
|
certFile: /tls/selfsigned.crt
|
||||||
keyFile: /tls/CF-altogether.at.key
|
keyFile: /tls/selfsigned.key
|
||||||
certificates:
|
certificates:
|
||||||
- certFile: /tls/CF-altogether.at.crt
|
- certFile: /tls/selfsigned.crt
|
||||||
keyFile: /tls/CF-altogether.at.key
|
keyFile: /tls/selfsigned.key
|
||||||
|
|
||||||
- certFile: /tls/wordpress.localhost.crt
|
|
||||||
keyFile: /tls/wordpress.localhost.key
|
|
||||||
options:
|
options:
|
||||||
default:
|
default:
|
||||||
clientAuth:
|
clientAuth:
|
||||||
# in PEM format. each file can contain multiple CAs.
|
# in PEM format. each file can contain multiple CAs.
|
||||||
caFiles:
|
caFiles:
|
||||||
- /tls/server.crt
|
- /tls/selfsigned.crt
|
||||||
clientAuthType: VerifyClientCertIfGiven
|
clientAuthType: VerifyClientCertIfGiven
|
@ -35,9 +35,6 @@ providers:
|
|||||||
docker:
|
docker:
|
||||||
endpoint: "unix:///var/run/docker.sock"
|
endpoint: "unix:///var/run/docker.sock"
|
||||||
exposedByDefault: false
|
exposedByDefault: false
|
||||||
# endpoint: "tcp://dockerproxy:2375"
|
|
||||||
# swarmMode: false
|
|
||||||
# network: "socket_proxy"
|
|
||||||
file:
|
file:
|
||||||
watch: true
|
watch: true
|
||||||
directory: "/etc/traefik/dynamic_conf"
|
directory: "/etc/traefik/dynamic_conf"
|
||||||
@ -45,6 +42,6 @@ providers:
|
|||||||
certificatesresolvers:
|
certificatesresolvers:
|
||||||
le:
|
le:
|
||||||
acme:
|
acme:
|
||||||
email: "raphy.martin@protonmail.ch"
|
email: "rama@altogether.at"
|
||||||
storage: "/certificates/acme.json"
|
storage: "/certificates/acme.json"
|
||||||
tlschallenge: true
|
tlschallenge: true
|
Loading…
Reference in New Issue
Block a user