Trying out this config #11

Merged
kovagoadi merged 26 commits from add-acme into main 2025-11-27 23:58:44 +01:00
3 changed files with 10 additions and 27 deletions
Showing only changes of commit a88f824e69 - Show all commits

View File

@@ -1,21 +0,0 @@
# ./traefik/dynamic_conf.yml
tcp:
routers:
# Router for HTTPS (Passthrough)
nginx-secure-router:
rule: "HostSNI(`*`)"
service: nginx-secure-service
# Passthrough must be true for SSL to reach Nginx encrypted
tls:
passthrough: true
entryPoints:
- "https"
services:
# Service defining the external IP
nginx-secure-service:
loadBalancer:
servers:
# This is the actual external IP and Port of your Nginx
- address: "192.168.1.85:443"

View File

@@ -1,11 +1,11 @@
# ./traefik/dynamic_conf.yml # ./traefik/forward-to-legacy-nginx.yml
tcp: tcp:
routers: routers:
# Router for HTTPS (Passthrough) # Router for HTTPS (Passthrough)
nginx-secure-router: nginx-legacy-router:
rule: "HostSNI(`*`)" rule: "HostSNI(`*`)"
service: nginx-secure-service service: nginx-legacy-service
# Passthrough must be true for SSL to reach Nginx encrypted # Passthrough must be true for SSL to reach Nginx encrypted
tls: tls:
passthrough: true passthrough: true
@@ -14,8 +14,8 @@ tcp:
services: services:
# Service defining the external IP # Service defining the external IP
nginx-secure-service: nginx-legacy-service:
loadBalancer: loadBalancer:
servers: servers:
# This is the actual external IP and Port of your Nginx # This is the actual external IP and Port of your Nginx
- address: "192.168.1.85:443" - address: "webserver:443"

View File

@@ -6,6 +6,7 @@ services:
- no-new-privileges:true - no-new-privileges:true
networks: networks:
- proxy - proxy
- legacy-nginx
command: command:
- "--providers.docker=true" - "--providers.docker=true"
- "--providers.docker.exposedbydefault=false" - "--providers.docker.exposedbydefault=false"
@@ -43,4 +44,7 @@ services:
- traefik.http.routers.https.tls=true - traefik.http.routers.https.tls=true
- traefik.http.routers.https.tls.certresolver=letsencrypt - traefik.http.routers.https.tls.certresolver=letsencrypt
networks: networks:
proxy: proxy:
legacy-nginx:
name: proxy
external: true