docker-compose.server.yml

@@ -20,9 +20,13 @@ services:
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.whoami.rule=Host(`whoami.strolap.com`)"
-      - "traefik.http.routers.whoami.entrypoints=websecure"
-      - "traefik.http.routers.whoami.tls=true"
-      - "traefik.http.routers.whoami.tls.certresolver=strolap"
+      - "traefik.http.routers.whoami.entrypoints=web,websecure"
+      - "traefik.http.routers.whoami-secure.rule=Host(`whoami.strolap.com`)"
+      - "traefik.http.routers.whoami-secure.entrypoints=websecure"
+      - "traefik.http.routers.whoami-secure.tls=true"
+      - "traefik.http.routers.whoami-secure.tls.certresolver=myresolver"
+      - "traefik.http.routers.whoami-secure.tls.domains[0].main=strolap.com"
+      - "traefik.http.routers.whoami-secure.tls.domains[0].sans=*.strolap.com"
     networks:
       proxy:
 

dynamic.yaml

@@ -1,45 +0,0 @@
-tls:
-  stores:
-    default:
-      defaultGeneratedCert:
-        resolver: strolap
-        domain:
-          main: strolap.com
-          sans:
-            - "*.strolap.com"
-http:
-  routers:
-    portainer:
-      rule: "Host(`proxy.strolap.com`)"
-      service: portainer
-      entryPoints:
-        - websecure
-      tls:
-        certResolver: strolap
-    homeassistant:
-      rule: "Host(`ha.strolap.com`)"
-      service: homeassistant
-      entryPoints:
-        - websecure
-      tls:
-        certResolver: strolap
-    photos:
-      rule: "Host(`photos.strolap.com`)"
-      service: photos
-      entryPoints:
-        - websecure
-      tls:
-        certResolver: strolap
-  services:
-    portainer:
-      loadBalancer:
-        servers:
-          - url: "http://portainer:9000"
-    homeassistant:
-      loadBalancer:
-        servers:
-          - url: "http://192.168.178.64:8123"
-    photos:
-      loadBalancer:
-        servers:
-          - url: "http://192.168.178.141:2283"

traefik.yaml

@@ -15,7 +15,47 @@ providers:
   file:
     filename: "/etc/traefik/dynamic.yaml"
 
+http:
+  routers:
+    portainer:
+      rule: "Host(`proxy.strolap.com`)"
+      service: portainer
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: myresolver
+    homeassistant:
+      rule: "Host(`ha.strolap.com`)"
+      service: homeassistant
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: myresolver
+    photos:
+      rule: "Host(`photos.strolap.com`)"
+      service: photos
+      entryPoints:
+        - websecure
+      tls:
+        certResolver: myresolver
+  services:
+    portainer:
+      loadBalancer:
+        servers:
+          - url: "http://portainer:9000"
+    homeassistant:
+      loadBalancer:
+        servers:
+          - url: "http://192.168.178.64:8123"
+    photos:
+      loadBalancer:
+        servers:
+          - url: "http://192.168.178.141:2283"
+
 certificatesResolvers:
-  strolap:
+  myresolver:
     acme:
-      email: timlappe@proton.med
+      email: timlappe@proton.me
+      storage: /etc/traefik/acme.json
+      dnsChallenge:
+        provider: hetzner