diff options
| author | Jenniferplusplus <contact@jenniferplusplus.com> | 2023-11-12 16:50:00 -0600 |
|---|---|---|
| committer | Jenniferplusplus <contact@jenniferplusplus.com> | 2023-11-12 16:50:00 -0600 |
| commit | 553dd1c1f29d6b89ee247d042a9ef66bd5442a0b (patch) | |
| tree | 222a84fd32bb92128bba6d93eaaeb7211825daed | |
| parent | 6054b96d9b02ab8c18100984f0570c328c2904a2 (diff) | |
| download | sandcastles-553dd1c1f29d6b89ee247d042a9ef66bd5442a0b.tar.gz sandcastles-553dd1c1f29d6b89ee247d042a9ef66bd5442a0b.tar.bz2 sandcastles-553dd1c1f29d6b89ee247d042a9ef66bd5442a0b.zip | |
build traefik
| -rw-r--r-- | docker-compose.yml | 5 | ||||
| -rw-r--r-- | proxy.Dockerfile | 5 | ||||
| -rw-r--r-- | volumes/proxy/traefik.toml | 2 |
3 files changed, 10 insertions, 2 deletions
diff --git a/docker-compose.yml b/docker-compose.yml index cf641da..2c8f43f 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -10,6 +10,7 @@ services: - DOCKER_STEPCA_INIT_NAME=Letterbook Sandcastles - DOCKER_STEPCA_INIT_DNS_NAMES=root-ca.castle,root-ca,localhost - DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT=true + - DOCKER_STEPCA_INIT_ACME=true ports: - "9000:9000" networks: @@ -18,7 +19,9 @@ services: - root-ca.castle proxy: - image: traefik:v2.5 + image: traefik-trust-root-ca + build: + dockerfile: proxy.Dockerfile volumes: - /var/run/docker.sock:/var/run/docker.sock - ./volumes/proxy/:/etc/traefik/ diff --git a/proxy.Dockerfile b/proxy.Dockerfile new file mode 100644 index 0000000..04f09cb --- /dev/null +++ b/proxy.Dockerfile @@ -0,0 +1,5 @@ +FROM traefik:v2.5 + +COPY volumes/root-ca/certs/root_ca.crt /usr/local/share/ca-certificates/root_ca.crt + +RUN cat /usr/local/share/ca-certificates/root_ca.crt >> /etc/ssl/certs/ca-certificates.crt
\ No newline at end of file diff --git a/volumes/proxy/traefik.toml b/volumes/proxy/traefik.toml index 22ec105..0c3f0a1 100644 --- a/volumes/proxy/traefik.toml +++ b/volumes/proxy/traefik.toml @@ -11,7 +11,7 @@ dashboard = true [certificatesResolvers.smallstep.acme] - caServer = "https://root-ca.castle:9000" # acme-staging-v02.api.letsencrypt.org/directory" + caServer = "https://root-ca.castle:9000/acme/acme/directory" # acme-staging-v02.api.letsencrypt.org/directory" storage = "acme.json" [certificatesResolvers.smallstep.acme.httpChallenge] entryPoint = "web" |