admin_jk/mapletree
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

variables for traefik

Browse source
This commit is contained in:
admin 2026-01-30 14:13:29 -07:00
parent 8a6f22549d
commit 8a42cb3bb9
1 changed files with 17 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

37
lxc1/core/traefik.yml
View file

@ -9,39 +9,34 @@ services:
mem_limit: "1024m"
mem_reservation: "128m"
restart: always
#ports:
# - "80:80" # HTTP
# - "443:443" # HTTPS
# - "888:8080" # Traefik Dashboard (optional, password-protect in production!)
command:
- "--api.dashboard=true"
- "--api.insecure=true" # Remove or secure in prod
- "--api.insecure=true"
- "--providers.docker=true"
- "--providers.docker.exposedbydefault=false"
- "--providers.docker.useBindPortIP=false"
- "--entrypoints.web.address=:80"
- "--entrypoints.websecure.address=:443"
- "--providers.docker.network=${DOCKER_NETWORK_LIST}"
# Variables for flexibility
- "--providers.docker.network=${DOCKER_NETWORKS}"
- "--providers.file.directory=/etc/traefik/dynamic"
- "--providers.file.watch=true"
## DNS resolver
- "--certificatesresolvers.myresolver.acme.dnschallenge=true"
- "--certificatesresolvers.myresolver.acme.dnschallenge.provider=desec"
- "--certificatesresolvers.myresolver.acme.dnschallenge.delaybeforecheck=90"
- --certificatesresolvers.myresolver.acme.dnschallenge.resolvers=1.1.1.1:53,8.8.8.8:53
- "--certificatesresolvers.myresolver.acme.email=admin@mapletree.email"
- "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
##HTTP resolver
- --certificatesresolvers.le_http.acme.httpchallenge=true
- --certificatesresolvers.le_http.acme.httpchallenge.entrypoint=web
- --certificatesresolvers.le_http.acme.email=admin@mapletree.email
- --certificatesresolvers.le_http.acme.storage=/letsencrypt/acme.json
- "--certificatesresolvers.dns_resolver.acme.dnschallenge=true"
- "--certificatesresolvers.dns_resolver.acme.dnschallenge.provider=desec"
- "--certificatesresolvers.dns_resolver.acme.dnschallenge.delaybeforecheck=90"
- "--certificatesresolvers.dns_resolver.acme.dnschallenge.resolvers=1.1.1.1:53,8.8.8.8:53"
- "--certificatesresolvers.dns_resolver.acme.email=${ACME_EMAIL}"
- "--certificatesresolvers.dns_resolver.acme.storage=/letsencrypt/acme.json"
## HTTP Resolver
- "--certificatesresolvers.http_resolver.acme.httpchallenge=true"
- "--certificatesresolvers.http_resolver.acme.httpchallenge.entrypoint=web"
- "--certificatesresolvers.http_resolver.acme.storage=/letsencrypt/acme.json"
- "--certificatesresolvers.http_resolver.acme.email=${ACME_EMAIL}"
environment:
# Pass the variables through
- DESEC_TOKEN=${DESEC_TOKEN}
- DESEC_DOMAIN=${DESEC_DOMAIN}
# (Any other Traefik env vars you need)
volumes:
- "/var/run/docker.sock:/var/run/docker.sock:ro"
- "/docker/core/traefik/letsencrypt:/letsencrypt"
- "${REPO_ROOT}/traefik/dynamic:/etc/traefik/dynamic"
- "/docker/traefik/letsencrypt:/letsencrypt"
- "/docker/traefik/dynamic:/etc/traefik/dynamic"