docker-compose.yml

@@ -1,4 +1,4 @@
-version: "1.0"
+version: "3.8"
 
 networks:
   default:
@@ -16,6 +16,7 @@ services:
       - "./traefik.yml:/traefik.yml:ro"
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
       - "./tls.yml:/etc/traefik/dynamic_conf/conf.yml:ro"
+      - "./acme.json:/certificates/acme.json"
       - "./tls-data:/tls:ro"
     labels:
       - "traefik.enable=true"

tls.yml

@@ -17,5 +17,13 @@ tls:
   certificates:
     - certFile: /tls/CF-altogether.at.crt
       keyFile: /tls/CF-altogether.at.key
-      stores:
+      
-        - default
+    - certFile: /tls/wordpress.localhost.crt
+      keyFile: /tls/wordpress.localhost.key
+  options:
+    default:
+      clientAuth:
+        # in PEM format. each file can contain multiple CAs.
+        caFiles:
+          - /tls/server.crt
+        clientAuthType: VerifyClientCertIfGiven

traefik.yml

@@ -1,6 +1,16 @@
 ## STATIC CONFIGURATION
+global:
+  checkNewVersion: true
+  sendAnonymousUsage: false
+
 log:
-  level: INFO
+  level: "INFO"
+
+accessLog:
+  filePath: "/logs/access.log"
+  bufferingSize: 100 # Configuring a buffer of 100 lines
+  filters:
+    statusCodes: "204-299,400"
 
 api:
   insecure: true
@@ -24,9 +34,17 @@ entryPoints:
 providers:
   docker:
     endpoint: "unix:///var/run/docker.sock"
-  #  endpoint: "tcp://dockerproxy:2375"
     exposedByDefault: false
+  #  endpoint: "tcp://dockerproxy:2375"
   #  swarmMode: false
   #  network: "socket_proxy"
   file:
+    watch: true
     directory: "/etc/traefik/dynamic_conf"
+
+certificatesresolvers:
+  le:
+    acme:
+      email: "raphy.martin@protonmail.ch"
+      storage: "/certificates/acme.json"
+      tlschallenge: true