init

compose.yml

@@ -0,0 +1,39 @@
+version: '3'
+
+services:
+  traefik:
+    image: traefik:v3.6.5
+    container_name: traefik
+    restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
+    networks:
+      - exposed
+    ports:
+      - 7080:80
+      - 7443:443
+    environment:
+      - HETZNER_API_TOKEN=${HETZNER_API_TOKEN}
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ${PROJECT_PATH-$PWD}/traefik.yml:/traefik.yml:ro
+      - ${PROJECT_PATH-$PWD}/config.yml:/config.yml:ro
+      - traefik-certs:/certs
+    labels:
+      traefik.enable: true
+
+      traefik.http.routers.traefik-secure.entrypoints: https
+      traefik.http.routers.traefik-secure.rule: Host(`traefik.arpa.urmel.de`)
+      traefik.http.routers.traefik-secure.tls: "true"
+      traefik.http.routers.traefik-secure.tls.certresolver: hetzner
+      traefik.http.routers.traefik-secure.tls.domains[0].main: "arpa.urmel.de"
+      traefik.http.routers.traefik-secure.tls.domains[0].sans: "*.arpa.urmel.de"
+
+      traefik.http.routers.traefik-secure.service: api@internal
+
+volumes:
+  traefik-certs:
+
+networks:
+  exposed:

config.yml

@@ -0,0 +1,22 @@
+#http:
+ #region routers 
+#  routers:
+    #proxmox:
+    #  entryPoints:
+    #    - "https"
+    #  rule: "Host(`proxmox.local.example.com`)"
+    #  middlewares:
+    #    - default-headers
+    #  tls: {}
+    #  service: proxmox
+
+#endregion
+#region services
+  #services:
+  #  proxmox:
+  #    loadBalancer:
+  #      servers:
+  #        - url: "https://192.168.0.100:8006"
+  #      passHostHeader: true
+   
+#endregion

traefik.yml

@@ -0,0 +1,30 @@
+api:
+  dashboard: true
+  debug: true
+entryPoints:
+  http:
+    address: ":80"
+    http:
+      redirections:
+        entryPoint:
+          to: https
+          scheme: https
+  https:
+    address: ":443"
+serversTransport:
+  insecureSkipVerify: true
+providers:
+  docker:
+    endpoint: "unix:///var/run/docker.sock"
+    exposedByDefault: false
+  file:
+    filename: /config.yml
+certificatesResolvers:
+  hetzner:
+    acme:
+      email: nikl.free44@gmail.com
+      storage:  /certs/acme.json
+      dnsChallenge:
+        provider: "hetzner"
+        resolvers:
+            - "hydrogen.ns.hetzner.com"