Files
infrastructure/ansible/roles/traefik/templates/traefik.yml
2023-02-01 22:53:04 -05:00

56 lines
1.1 KiB
YAML

entryPoints:
web:
address: :80
http:
redirections:
entryPoint:
to: web-secure
scheme: https
web-secure:
address: :443
http:
tls:
certResolver: letsencrypt
domains:
- main: "{{ personal_domain }}"
- sans: "*.{{ personal_domain }}"
- main: "local.{{ personal_domain }}"
- sans: "*.local.{{ personal_domain }}"
middlewares:
- secure-headers@file
traefik:
address: :8080
certificatesResolvers:
letsencrypt:
acme:
# Staging server
caServer: https://acme-staging-v02.api.letsencrypt.org/directory
# Production server
# caServer: https://acme-v02.api.letsencrypt.org/directory
email: "{{ letsencrypt_email }}"
storage: /etc/traefik.acme.json
dnsChallenge:
provider: porkbun
delayBeforeCheck: 0
serversTransport:
insecureSkipVerify: true
tls:
options:
default:
minVersion: VersionTLS12
providers:
docker:
endpoint: tcp://docker_socket_proxy:2375
exposedByDefault: false
network: traefik
file:
directory: /etc/traefik/conf
watch: true