DNS ACME resolution

2023-04-30 03:38:45 +10:00
parent cf9d8881f0
commit f36882abf2
4 changed files with 19 additions and 6 deletions
--- a/services/reverse-proxy/configs/dynamic/tls.yml
+++ b/services/reverse-proxy/configs/dynamic/tls.yml
@@ -1,6 +1,6 @@
 tls:
  stores:
    default:
-      defaultCertificate:
-        certFile: /run/secrets/traefik_tls_cert
-        keyFile: /run/secrets/traefik_tls_key
+      defaultGeneratedCert:
+        resolver: defaultResolver
+        domain:
--- a/services/reverse-proxy/configs/traefik.yml
+++ b/services/reverse-proxy/configs/traefik.yml
@@ -13,6 +13,15 @@ serverstransport:
 api: {}
 accessLog: {}

+certificatesResolvers:
+  defaultResolver:
+    acme:
+      email: {{ env `NASCOMPOSE_TRAEFIK_ADMIN_EMAIL` }}
+      storage: acme.json
+      dnsChallenge:
+        provider: cloudflare
+      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
+
 entryPoints:
  web:
    address: :80