commit d9781921a69dea2d4cec2fabca21a739c987f79c Author: Kyattsukuro Date: Sun Dec 28 21:52:42 2025 +0100 init diff --git a/compose.yml b/compose.yml new file mode 100644 index 0000000..f0408e1 --- /dev/null +++ b/compose.yml @@ -0,0 +1,39 @@ +version: '3' + +services: + traefik: + image: traefik:v3.6.5 + container_name: traefik + restart: unless-stopped + security_opt: + - no-new-privileges:true + networks: + - exposed + ports: + - 7080:80 + - 7443:443 + environment: + - HETZNER_API_TOKEN=${HETZNER_API_TOKEN} + volumes: + - /etc/localtime:/etc/localtime:ro + - /var/run/docker.sock:/var/run/docker.sock:ro + - ${PROJECT_PATH-$PWD}/traefik.yml:/traefik.yml:ro + - ${PROJECT_PATH-$PWD}/config.yml:/config.yml:ro + - traefik-certs:/certs + labels: + traefik.enable: true + + traefik.http.routers.traefik-secure.entrypoints: https + traefik.http.routers.traefik-secure.rule: Host(`traefik.arpa.urmel.de`) + traefik.http.routers.traefik-secure.tls: "true" + traefik.http.routers.traefik-secure.tls.certresolver: hetzner + traefik.http.routers.traefik-secure.tls.domains[0].main: "arpa.urmel.de" + traefik.http.routers.traefik-secure.tls.domains[0].sans: "*.arpa.urmel.de" + + traefik.http.routers.traefik-secure.service: api@internal + +volumes: + traefik-certs: + +networks: + exposed: \ No newline at end of file diff --git a/config.yml b/config.yml new file mode 100644 index 0000000..31946bb --- /dev/null +++ b/config.yml @@ -0,0 +1,22 @@ +#http: + #region routers +# routers: + #proxmox: + # entryPoints: + # - "https" + # rule: "Host(`proxmox.local.example.com`)" + # middlewares: + # - default-headers + # tls: {} + # service: proxmox + +#endregion +#region services + #services: + # proxmox: + # loadBalancer: + # servers: + # - url: "https://192.168.0.100:8006" + # passHostHeader: true + +#endregion diff --git a/traefik.yml b/traefik.yml new file mode 100644 index 0000000..78b3fb1 --- /dev/null +++ b/traefik.yml @@ -0,0 +1,30 @@ +api: + dashboard: true + debug: true +entryPoints: + http: + address: ":80" + http: + redirections: + entryPoint: + to: https + scheme: https + https: + address: ":443" +serversTransport: + insecureSkipVerify: true +providers: + docker: + endpoint: "unix:///var/run/docker.sock" + exposedByDefault: false + file: + filename: /config.yml +certificatesResolvers: + hetzner: + acme: + email: nikl.free44@gmail.com + storage: /certs/acme.json + dnsChallenge: + provider: "hetzner" + resolvers: + - "hydrogen.ns.hetzner.com"