From 291d4a77ee5dd0f88511cc4fdd2c3a01bca499f9 Mon Sep 17 00:00:00 2001
From: kovagoadi <kovagoadi@gmail.com>
Date: Sat, 20 Dec 2025 14:49:11 +0100
Subject: [PATCH] Did some changes

---
 dev/forward-to-legacy-nginx.yaml | 17 -----------------
 docker-compose.yaml              |  4 +++-
 2 files changed, 3 insertions(+), 18 deletions(-)

diff --git a/dev/forward-to-legacy-nginx.yaml b/dev/forward-to-legacy-nginx.yaml
index 2c27fc3..7ec78ce 100644
--- a/dev/forward-to-legacy-nginx.yaml
+++ b/dev/forward-to-legacy-nginx.yaml
@@ -1,22 +1,5 @@
 # ./traefik/forward-to-legacy-nginx.yaml
 
-    
-# static configuration (traefik.yml)
-# entryPoints:
-#   web:
-#     address: ":80" # or :898 in your case
-#     allowACMEByPass: true  # <--- WITHOUT THIS, TRAEFIK ALWAYS WINS
-#   https:
-#     address: ":443"
-
-# certificatesResolvers:
-#   letsencrypt:
-#     acme:
-#       email: "kovagoadi@gmail.com"
-#       storage: "acme.json"
-#       httpChallenge:
-#        entryPoint: web
-
 tcp:
   routers:
     # Router for LEGACY HTTPS (Passthrough)
diff --git a/docker-compose.yaml b/docker-compose.yaml
index e9b5234..9dc1bae 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -1,5 +1,5 @@
 services:
-  traefik8:
+  traefik9:
     image: "traefik:v3.6@sha256:67622638cd88dbfcfba40159bc652ecf0aea0e032f8a3c7e3134ae7c037b9910"
     restart: unless-stopped
     security_opt:
@@ -19,6 +19,7 @@ services:
       - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
       - "--certificatesresolvers.letsencrypt.acme.email=kovagoadi@gmail.com"
       - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
+      - "--certificatesResolvers.letsencrypt.acme.caServer=${CERTBOT_CA_RESOLVER}" 
       - "${TRAEFIK_LEGACY_OPT:-}"
       - "--providers.file.watch=true"
     ports:
@@ -45,6 +46,7 @@ services:
       - "traefik.http.routers.whoami.entrypoints=web"
       - traefik.http.routers.https.entrypoints=https
       - traefik.http.routers.https.tls=true
+      - traefik.http.routers.https.tls.certresolver=letsencrypt
 networks:
   proxy:
   legacy-nginx: