added duckdns redirect

compose.yml

@@ -14,6 +14,7 @@ services:
       - 7443:443
     environment:
       - HETZNER_API_TOKEN=${HETZNER_API_TOKEN}
+      - DUCKDNS_TOKEN=${DUCKDNS_TOKEN}
       - AUTH_STRING=${AUTH_STRING}
     volumes:
       - /etc/localtime:/etc/localtime:ro

config/config.yml

@@ -1,10 +1,13 @@
 http: 
   routers:
     traefik-secure:
+      service: noop@internal
       rule: Host(`urmel.de`)
       entryPoints:
         - https
+        - http
       tls:
+        certResolver: hetzner
         domains:
           - main: "arpa.urmel.de"
             sans: 
@@ -12,12 +15,25 @@ http:
           - main: "urmel.de"
             sans: 
               - "*.urmel.de"
-  services:
-    unknown-page:
-      loadbalancer:
-        server:
-          - url: "somedomain.invalide"
+    forward-duckdns:
+      service: noop@internal
+      rule: HostRegexp(`^https://([^.]+)\.urmel\.duckdns\.org(/.*$|$)`)
+      middlewares: redirect-duckdns@file
+      tls: 
+        certResolver: duckdns
+        domains:
+          - main: "urmel.duckdns.org"
+            sans: 
+              - "*.urmel.duckdns.org"
+      entryPoints:
+        - https
+        - http
+
   middlewares:
     traefik-auth:
       basicauth:
         users: '{{ env "AUTH_STRING" }}'
+    redirect-duckdns:
+      redirectRegex:
+        regex: "^http(s?)://([^.]+)\\.urmel\\.duckdns\\.org(/.*$|$)"
+        replacement: "http${1}://${2}.urmel.de${3}"

traefik.yml

@@ -19,6 +19,8 @@ providers:
     exposedByDefault: false
   file:
     directory: /config
+# https://doc.traefik.io/traefik/reference/install-configuration/tls/certificate-resolvers/acme/
+# https://go-acme.github.io/lego/dns/
 certificatesResolvers:
   hetzner:
     acme:
@@ -28,3 +30,11 @@ certificatesResolvers:
         provider: "hetzner"
         resolvers:
             - "hydrogen.ns.hetzner.com"
+  duckdns:
+    acme:
+      email: nikl.free44@gmail.com
+      storage:  /certs/duckdns_acme.json
+      dnsChallenge:
+        provider: "duckdns"
+        resolvers:
+            - "8.8.4.4"