traefik/templates/traefik.yml.j2

56 lines
1.3 KiB
Django/Jinja

api:
dashboard: true
debug: true
entryPoints:
http:
asDefault: true
address: ":{{ traefik.http_port }}"
http:
redirections:
entryPoint:
to: https
scheme: https
https:
asDefault: true
address: ":{{ traefik.https_port }}"
{% if 2022 in traefik.expose_additional_ports -%}
public_ssh:
address: ":2022"
{% endif -%}
serversTransport:
insecureSkipVerify: true
providers:
docker:
endpoint: "unix:///var/run/docker.sock"
exposedByDefault: false
network: traefik_exposed
file:
directory: /config
# https://doc.traefik.io/traefik/reference/install-configuration/tls/certificate-resolvers/acme/
# https://go-acme.github.io/lego/dns/
certificatesResolvers:
hetzner:
acme:
email: nikl.free44@gmail.com
storage: /certs/acme.json
dnsChallenge:
provider: "hetzner"
resolvers:
- "hydrogen.ns.hetzner.com"
{% if traefik.duckdns_api_token -%}
duckdns:
acme:
email: nikl.free44@gmail.com
storage: /certs/duckdns_acme.json
dnsChallenge:
provider: "duckdns"
disablePropagationCheck: true
delayBeforeCheck: 120s
propagation:
disableANSChecks: true
requireAllRNS: true
resolvers:
- "8.8.8.8:53"
- "1.1.1.1:53"
{%- endif %}