traefik https

1 files changed, 13 insertions, 0 deletions

diff --git a/docker-compose.yml b/docker-compose.yml
index 6b3f885..51539ac 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -9,16 +9,29 @@ services:
             - "--providers.docker=true"
             - "--providers.docker.exposedbydefault=false"
             - "--entrypoints.web.address=:80"
+            - "--entrypoints.websecure.address=:80"
+            - "--certificatesresolvers.mytlschallenge.acme.tlschallenge=true"
+            - "--certificatesresolvers.mytlschallenge.acme.email=hanemile@protonmail.com"
+            - "--certificatesresolvers.mytlschallenge.acme.storage=/letsencrypt/acme.json"
             - "--metrics.prometheus=true"
         ports:
             - "80:80"
+            - "443:443"
             - "8080:8080"
         volumes:
+            - "./letsencrypt:/letsencrypt"
             - "/var/run/docker.sock:/var/run/docker.sock:ro"
         labels:
             - "traefik.enable=true"
             - "traefik.http.routers.traefik.entrypoints=web"
             - "traefik.http.routers.traefik.rule=Host(`traefik.${HOSTNAME}`)"
+            - "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
+            - "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
+            - "traefik.http.routers.traefik-secure.entrypoints=websecure"
+            - "traefik.http.routers.traefik-secure.rule=Host(`traefik.${HOSTNAME}`)"
+            - "traefik.http.routers.traefik-secure.tls=true"
+            - "traefik.http.routers.traefik-secure.tls.certresolver=mytlschallenge"
+            - "traefik.http.routers.traefik-secure.service=api@internal"
             - "traefik.http.services.traefik.loadbalancer.server.port=8080"
         networks:
             - circus