change docker version

Reviewed-on: #3

docker-compose-whoami.yml

@@ -1,4 +1,4 @@
-version: "1.0"
+version: "3.9"
 
 networks:
   default:

docker-compose.yml

@@ -1,4 +1,4 @@
-version: "3.8"
+version: "3.9"
 
 networks:
   default:
@@ -23,10 +23,10 @@ services:
       - "traefik.docker.network=${TRAEFIK_NETWORK}"
       
       # HTTP -> HTTPS
-      #- "traefik.http.routers.http-catchall.entrypoints=web"
-      #- "traefik.http.routers.http-catchall.rule=HostRegexp(`{host:.+}`)"
-      #- "traefik.http.routers.http-catchall.middlewares=redirect-to-https"
-      #- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
+      - "traefik.http.routers.http-catchall.entrypoints=web"
+      - "traefik.http.routers.http-catchall.rule=HostRegexp(`{host:.+}`)"
+      - "traefik.http.routers.http-catchall.middlewares=redirect-to-https"
+      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
       
       # HTTPS Routers
       - "traefik.http.routers.${PROJECT_NAME}_traefik.rule=Host(`${PROJECT_URL}`)"

init

@@ -6,6 +6,8 @@ mkdir tls-data
 
 docker network create $TRAEFIK_NETWORK
 
+sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ./tls-data/selfsigned.key -out ./tls-data/selfsigned.crt
+
 docker compose up -d
 docker compose -f docker-compose-whoami.yml up -d
 

tls.yml

@@ -12,18 +12,16 @@ tls:
   stores:
     default:
       defaultCertificate:
-        certFile: /tls/CF-altogether.at.crt
-        keyFile: /tls/CF-altogether.at.key 
+        certFile: /tls/selfsigned.crt
+        keyFile: /tls/selfsigned.key 
   certificates:
-    - certFile: /tls/CF-altogether.at.crt
-      keyFile: /tls/CF-altogether.at.key
+    - certFile: /tls/selfsigned.crt
+      keyFile: /tls/selfsigned.key
       
-    - certFile: /tls/wordpress.localhost.crt
-      keyFile: /tls/wordpress.localhost.key
   options:
     default:
       clientAuth:
         # in PEM format. each file can contain multiple CAs.
         caFiles:
-          - /tls/server.crt
+          - /tls/selfsigned.crt
         clientAuthType: VerifyClientCertIfGiven

traefik.yml

@@ -28,8 +28,6 @@ entryPoints:
     http:
       middlewares:
         - secureHeaders@file
-  minecraft:
-    address: ':25565/tcp'
   ssh:
     address: ":22"
 
@@ -37,9 +35,6 @@ providers:
   docker:
     endpoint: "unix:///var/run/docker.sock"
     exposedByDefault: false
-  #  endpoint: "tcp://dockerproxy:2375"
-  #  swarmMode: false
-  #  network: "socket_proxy"
   file:
     watch: true
     directory: "/etc/traefik/dynamic_conf"
@@ -47,6 +42,6 @@ providers:
 certificatesresolvers:
   le:
     acme:
-      email: "raphy.martin@protonmail.ch"
+      email: "rama@altogether.at"
       storage: "/certificates/acme.json"
       tlschallenge: true