1
0

feat: https a certifikaty s ca

This commit is contained in:
2026-03-01 23:40:24 +01:00
parent a321b89111
commit 69f5bb7068
9 changed files with 225 additions and 38 deletions

View File

@@ -1,3 +1,8 @@
networks:
external-net:
name: ${EXTERNAL_NETWORK:-traefiknet}
external: true
services:
traefik:
image: traefik:latest
@@ -11,12 +16,15 @@ services:
- "--accesslog.filepath=/logs/access.log"
- "--entrypoints.web.address=:80"
- "--entrypoints.web.forwardedheaders.trustedips=0.0.0.0/0"
- "--entrypoints.web.http.redirections.entrypoint.to=websecure"
- "--entrypoints.web.http.redirections.entrypoint.scheme=https"
- "--entrypoints.web.http.redirections.entrypoint.permanent=true"
- "--entrypoints.websecure.address=:443"
- "--entrypoints.websecure.forwardedheaders.trustedips=0.0.0.0/0"
- "--api.dashboard=true"
- "--providers.docker=true"
- "--providers.docker.endpoint=unix:///var/run/docker.sock"
- "--providers.docker.network=${EXTERNAL_NETWORK}"
- "--providers.docker.network=${EXTERNAL_NETWORK:-traefiknet}"
- "--providers.docker.exposedbydefault=false"
- "--providers.docker.watch=true"
- "--providers.file.filename=/etc/traefik/traefik_dynamic.yml"
@@ -24,17 +32,19 @@ services:
labels:
- "traefik.enable=true"
- "traefik.http.routers.traefik-dashboard.rule=Host(`traefik.${DEV_URL}`)"
- "traefik.http.routers.traefik-dashboard.entrypoints=web"
- "traefik.http.routers.traefik-dashboard.entrypoints=websecure"
- "traefik.http.routers.traefik-dashboard.service=api@internal"
- "traefik.http.routers.traefik-dashboard.tls=true"
ports:
- "80:80"
- "443:443"
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
- ./traefik/certs:/certs:ro
- ./traefik/traefik_dynamic.yml:/etc/traefik/traefik_dynamic.yml:ro
- ./traefik/logs:/logs
networks:
- ${EXTERNAL_NETWORK}
- external-net
portainer:
image: portainer/portainer-ce:latest
@@ -46,13 +56,9 @@ services:
labels:
- "traefik.enable=true"
- "traefik.http.routers.portainer.rule=Host(`portainer.${DEV_URL}`)"
- "traefik.http.routers.portainer.entrypoints=web"
- "traefik.http.routers.portainer.entrypoints=websecure"
- "traefik.http.routers.portainer.service=portainer"
- "traefik.http.routers.portainer.tls=true"
- "traefik.http.services.portainer.loadbalancer.server.port=9000"
networks:
- ${EXTERNAL_NETWORK}
networks:
traefiknet:
name: ${EXTERNAL_NETWORK}
external: true
- external-net