diff options
| author | Jenniferplusplus <contact@jenniferplusplus.com> | 2023-11-12 15:27:50 -0600 |
|---|---|---|
| committer | Jenniferplusplus <contact@jenniferplusplus.com> | 2023-11-12 15:27:50 -0600 |
| commit | 6054b96d9b02ab8c18100984f0570c328c2904a2 (patch) | |
| tree | d2e6e58c67a9fb63b7c903f64acc9156c1b2e329 /volumes | |
| parent | 2b65cf918a98455e360798cb6b75db58860cbf54 (diff) | |
| download | sandcastles-6054b96d9b02ab8c18100984f0570c328c2904a2.tar.gz sandcastles-6054b96d9b02ab8c18100984f0570c328c2904a2.tar.bz2 sandcastles-6054b96d9b02ab8c18100984f0570c328c2904a2.zip | |
configure traefik and smallstep
Diffstat (limited to 'volumes')
| -rw-r--r-- | volumes/proxy/acme.json | 0 | ||||
| -rw-r--r-- | volumes/proxy/traefik.toml | 4 | ||||
| -rw-r--r-- | volumes/proxy/traefik_dynamic.toml | 25 |
3 files changed, 27 insertions, 2 deletions
diff --git a/volumes/proxy/acme.json b/volumes/proxy/acme.json new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/volumes/proxy/acme.json diff --git a/volumes/proxy/traefik.toml b/volumes/proxy/traefik.toml index 6d3acb6..22ec105 100644 --- a/volumes/proxy/traefik.toml +++ b/volumes/proxy/traefik.toml @@ -11,7 +11,7 @@ dashboard = true [certificatesResolvers.smallstep.acme] - caServer = "https://root-ca" # acme-staging-v02.api.letsencrypt.org/directory" + caServer = "https://root-ca.castle:9000" # acme-staging-v02.api.letsencrypt.org/directory" storage = "acme.json" [certificatesResolvers.smallstep.acme.httpChallenge] entryPoint = "web" @@ -21,4 +21,4 @@ network = "fediverse" [providers.file] - filename = "traefik_dynamic.toml" + filename = "/etc/traefik/traefik_dynamic.toml" diff --git a/volumes/proxy/traefik_dynamic.toml b/volumes/proxy/traefik_dynamic.toml new file mode 100644 index 0000000..cda5b24 --- /dev/null +++ b/volumes/proxy/traefik_dynamic.toml @@ -0,0 +1,25 @@ +[http.middlewares.simpleAuth.basicAuth] + users = [ + # username: sandcastles + # password: admin + "sandcastles:$apr1$Xe1bQOFU$OQ.6qf4QCcRk5E8mQ.yt4." + ] + +[http.routers.api] + rule = "Host(`dashboard.castle`)" + entrypoints = ["websecure"] + middlewares = ["simpleAuth"] + service = "api@internal" + [http.routers.api.tls] + certResolver = "smallstep" + +[http.routers.dockerhost] + rule = "Host(`host.castle`)" + entrypoints = ["websecure"] + service = "dockerhost" + [http.routers.dockerhost.tls] + certResolver = "smallstep" + +[http.services.dockerhost] + [http.services.dockerhost.loadbalancer.servers] + url = "http://host.docker.internal:5127"
\ No newline at end of file |