From fdf3d76400aa772b4b53672acf995ea1b714cdb8 Mon Sep 17 00:00:00 2001
From: admin <jkilloran@mapletree.email>
Date: Tue, 27 Jan 2026 13:24:32 -0700
Subject: [PATCH] change wsc smf to be http resolver

---
 core/docker-compose.yml            |  6 ++++++
 core/traefik/dynamic/lxc2-smf.yaml | 10 ++++++++--
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/core/docker-compose.yml b/core/docker-compose.yml
index b3282f9..16bf4ad 100644
--- a/core/docker-compose.yml
+++ b/core/docker-compose.yml
@@ -67,12 +67,18 @@ services:
       - "--providers.docker.network=web,request"
       - "--providers.file.directory=/etc/traefik/dynamic"
       - "--providers.file.watch=true"
+      ##DNS resolver
       - "--certificatesresolvers.myresolver.acme.dnschallenge=true"
       - "--certificatesresolvers.myresolver.acme.dnschallenge.provider=desec"
       - "--certificatesresolvers.myresolver.acme.dnschallenge.delaybeforecheck=90"
       - --certificatesresolvers.myresolver.acme.dnschallenge.resolvers=1.1.1.1:53,8.8.8.8:53
       - "--certificatesresolvers.myresolver.acme.email=admin@mapletree.email"
       - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
+      ##HTTP resolver
+      - --certificatesresolvers.le_http.acme.httpchallenge=true
+      - --certificatesresolvers.le_http.acme.httpchallenge.entrypoint=web
+      - --certificatesresolvers.le_http.acme.email=admin@mapletree.email
+      - --certificatesresolvers.le_http.acme.storage=/letsencrypt/acme.json
     environment:
     # Pass the variables through
       - DESEC_TOKEN=${DESEC_TOKEN}
diff --git a/core/traefik/dynamic/lxc2-smf.yaml b/core/traefik/dynamic/lxc2-smf.yaml
index aad5e1d..e1170c9 100644
--- a/core/traefik/dynamic/lxc2-smf.yaml
+++ b/core/traefik/dynamic/lxc2-smf.yaml
@@ -4,9 +4,9 @@ http:
       rule: "Host(`archive.westernsubaruclub.ca`)"
       service: smf-service
       entryPoints:
-        - web,websecure
+        - websecure
       tls:
-        certResolver: myresolver
+        certResolver: le_http
 
   services:
     smf-service:
@@ -14,3 +14,9 @@ http:
         servers:
           - url: "http://172.16.201.202:80"
         passHostHeader: true
+
+  middlewares:
+    https-redirect:
+      redirectScheme:
+        scheme: https
+        permanent: true
\ No newline at end of file