John
3871e30abd
- Fixed certificatesResolvers configuration in static.yml (moved out of tls section) - Added DNS resolvers to Cloudflare ACME challenge configuration - Added persistent volume mount for Let's Encrypt certificates - Updated Outline service labels to use flow.frostlabs.me with proper cert resolver - Updated Authentik service labels to use auth.frostlabs.me with proper cert resolver - Added security headers and rate limiting middlewares to dynamic.yml - Added example templates for public-facing service configuration 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
60 lines
1005 B
YAML
60 lines
1005 B
YAML
# /etc/traefik/traefik.yml or /etc/traefik/static.yml
|
|
|
|
# Global configuration
|
|
global:
|
|
checkNewVersion: false
|
|
sendAnonymousUsage: false
|
|
|
|
# API and Dashboard
|
|
api:
|
|
dashboard: true
|
|
insecure: true
|
|
|
|
# Health check endpoint
|
|
ping: {}
|
|
|
|
# Entry points
|
|
entryPoints:
|
|
web:
|
|
address: ":80"
|
|
http:
|
|
redirections:
|
|
entrypoint:
|
|
to: websecure
|
|
scheme: https
|
|
|
|
websecure:
|
|
address: ":443"
|
|
|
|
# Providers
|
|
providers:
|
|
# Docker Swarm provider
|
|
swarm:
|
|
endpoint: "unix:///var/run/docker.sock"
|
|
exposedByDefault: false
|
|
network: homelab
|
|
watch: true
|
|
|
|
# File provider for dynamic configuration
|
|
file:
|
|
directory: /etc/traefik/dynamic
|
|
watch: true
|
|
|
|
# Certificate resolvers
|
|
certificatesResolvers:
|
|
cloudflare:
|
|
acme:
|
|
email: john.allisonwin@outlook.com
|
|
storage: /certificates/acme.json
|
|
dnsChallenge:
|
|
provider: cloudflare
|
|
resolvers:
|
|
- 1.1.1.1:53
|
|
- 8.8.8.8:53
|
|
|
|
# Logging
|
|
log:
|
|
level: INFO
|
|
|
|
accessLog: {}
|