append selfsigned cert creation

This commit is contained in:
Raphael Martin 2024-01-16 23:36:22 +01:00
parent cd63ad4a55
commit 938009c86d
3 changed files with 8 additions and 11 deletions

2
init
View File

@ -6,6 +6,8 @@ mkdir tls-data
docker network create $TRAEFIK_NETWORK docker network create $TRAEFIK_NETWORK
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ./tls-data/selfsigned.key -out ./tls-data/selfsigned.crt
docker compose up -d docker compose up -d
docker compose -f docker-compose-whoami.yml up -d docker compose -f docker-compose-whoami.yml up -d

12
tls.yml
View File

@ -12,18 +12,16 @@ tls:
stores: stores:
default: default:
defaultCertificate: defaultCertificate:
certFile: /tls/CF-altogether.at.crt certFile: /tls/selfsigned.crt
keyFile: /tls/CF-altogether.at.key keyFile: /tls/selfsigned.key
certificates: certificates:
- certFile: /tls/CF-altogether.at.crt - certFile: /tls/selfsigned.crt
keyFile: /tls/CF-altogether.at.key keyFile: /tls/selfsigned.key
- certFile: /tls/wordpress.localhost.crt
keyFile: /tls/wordpress.localhost.key
options: options:
default: default:
clientAuth: clientAuth:
# in PEM format. each file can contain multiple CAs. # in PEM format. each file can contain multiple CAs.
caFiles: caFiles:
- /tls/server.crt - /tls/selfsigned.crt
clientAuthType: VerifyClientCertIfGiven clientAuthType: VerifyClientCertIfGiven

View File

@ -35,9 +35,6 @@ providers:
docker: docker:
endpoint: "unix:///var/run/docker.sock" endpoint: "unix:///var/run/docker.sock"
exposedByDefault: false exposedByDefault: false
# endpoint: "tcp://dockerproxy:2375"
# swarmMode: false
# network: "socket_proxy"
file: file:
watch: true watch: true
directory: "/etc/traefik/dynamic_conf" directory: "/etc/traefik/dynamic_conf"
@ -45,6 +42,6 @@ providers:
certificatesresolvers: certificatesresolvers:
le: le:
acme: acme:
email: "raphy.martin@protonmail.ch" email: "rama@altogether.at"
storage: "/certificates/acme.json" storage: "/certificates/acme.json"
tlschallenge: true tlschallenge: true