Compare commits

..

1 Commits

Author SHA1 Message Date
rama
1d85d0cc4e Merge pull request 'changed README.md' (#2) from testing into main
Reviewed-on: #2
2023-11-25 14:09:37 +01:00
4 changed files with 11 additions and 40 deletions

View File

@@ -1,6 +1,6 @@
MIT License MIT License
Copyright (c) 2023 altogether Copyright (c) 2023 docker
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

View File

@@ -1,4 +1,4 @@
version: "3.8" version: "1.0"
networks: networks:
default: default:
@@ -16,17 +16,16 @@ services:
- "./traefik.yml:/traefik.yml:ro" - "./traefik.yml:/traefik.yml:ro"
- "/var/run/docker.sock:/var/run/docker.sock:ro" - "/var/run/docker.sock:/var/run/docker.sock:ro"
- "./tls.yml:/etc/traefik/dynamic_conf/conf.yml:ro" - "./tls.yml:/etc/traefik/dynamic_conf/conf.yml:ro"
- "./acme.json:/certificates/acme.json"
- "./tls-data:/tls:ro" - "./tls-data:/tls:ro"
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.docker.network=${TRAEFIK_NETWORK}" - "traefik.docker.network=${TRAEFIK_NETWORK}"
# HTTP -> HTTPS # HTTP -> HTTPS
#- "traefik.http.routers.http-catchall.entrypoints=web" - "traefik.http.routers.http-catchall.entrypoints=web"
#- "traefik.http.routers.http-catchall.rule=HostRegexp(`{host:.+}`)" - "traefik.http.routers.http-catchall.rule=HostRegexp(`{host:.+}`)"
#- "traefik.http.routers.http-catchall.middlewares=redirect-to-https" - "traefik.http.routers.http-catchall.middlewares=redirect-to-https"
#- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https" - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
# HTTPS Routers # HTTPS Routers
- "traefik.http.routers.${PROJECT_NAME}_traefik.rule=Host(`${PROJECT_URL}`)" - "traefik.http.routers.${PROJECT_NAME}_traefik.rule=Host(`${PROJECT_URL}`)"

12
tls.yml
View File

@@ -17,13 +17,5 @@ tls:
certificates: certificates:
- certFile: /tls/CF-altogether.at.crt - certFile: /tls/CF-altogether.at.crt
keyFile: /tls/CF-altogether.at.key keyFile: /tls/CF-altogether.at.key
stores:
- certFile: /tls/wordpress.localhost.crt - default
keyFile: /tls/wordpress.localhost.key
options:
default:
clientAuth:
# in PEM format. each file can contain multiple CAs.
caFiles:
- /tls/server.crt
clientAuthType: VerifyClientCertIfGiven

View File

@@ -1,16 +1,6 @@
## STATIC CONFIGURATION ## STATIC CONFIGURATION
global:
checkNewVersion: true
sendAnonymousUsage: false
log: log:
level: "INFO" level: INFO
accessLog:
filePath: "/logs/access.log"
bufferingSize: 100 # Configuring a buffer of 100 lines
filters:
statusCodes: "204-299,400"
api: api:
insecure: true insecure: true
@@ -28,25 +18,15 @@ entryPoints:
http: http:
middlewares: middlewares:
- secureHeaders@file - secureHeaders@file
minecraft:
address: ':25565/tcp'
ssh: ssh:
address: ":22" address: ":22"
providers: providers:
docker: docker:
endpoint: "unix:///var/run/docker.sock" endpoint: "unix:///var/run/docker.sock"
exposedByDefault: false
# endpoint: "tcp://dockerproxy:2375" # endpoint: "tcp://dockerproxy:2375"
exposedByDefault: false
# swarmMode: false # swarmMode: false
# network: "socket_proxy" # network: "socket_proxy"
file: file:
watch: true directory: "/etc/traefik/dynamic_conf"
directory: "/etc/traefik/dynamic_conf"
certificatesresolvers:
le:
acme:
email: "raphy.martin@protonmail.ch"
storage: "/certificates/acme.json"
tlschallenge: true