kovagoadi
a88191b339
All checks were successful
Remote Deployment Pipeline / Prepare Context (pull_request) Successful in 2s
Remote Deployment Pipeline / Deploy (Staging) (pull_request) Has been skipped
Remote Deployment Pipeline / Deploy (Dev/Preview) (pull_request) Successful in 59s
Remote Deployment Pipeline / Cleanup Preview (pull_request) Has been skipped
Remote Deployment Pipeline / Deploy (Production) (pull_request) Has been skipped
56 lines
1.4 KiB
YAML
56 lines
1.4 KiB
YAML
# ./traefik/forward-to-legacy-nginx.yaml
|
|
|
|
|
|
# static configuration (traefik.yml)
|
|
# entryPoints:
|
|
# web:
|
|
# address: ":80" # or :898 in your case
|
|
# allowACMEByPass: true # <--- WITHOUT THIS, TRAEFIK ALWAYS WINS
|
|
# https:
|
|
# address: ":443"
|
|
|
|
# certificatesResolvers:
|
|
# letsencrypt:
|
|
# acme:
|
|
# email: "kovagoadi@gmail.com"
|
|
# storage: "acme.json"
|
|
# httpChallenge:
|
|
# entryPoint: web
|
|
|
|
tcp:
|
|
routers:
|
|
# Router for LEGACY HTTPS (Passthrough)
|
|
nginx-legacy-router-secure:
|
|
# DO NOT use "*". List the domains that Nginx manages itself.
|
|
# If you use "*", Traefik's own HTTPS domains will not work.
|
|
rule: "HostSNI(`excali.kovagoadi.hu`) || HostSNI(`another-legacy.hu`)"
|
|
service: nginx-legacy-service-secure
|
|
tls:
|
|
passthrough: true
|
|
priority: 1
|
|
entryPoints:
|
|
- "https"
|
|
|
|
services:
|
|
nginx-legacy-service-secure:
|
|
loadBalancer:
|
|
servers:
|
|
- address: "webserver:443"
|
|
|
|
http:
|
|
routers:
|
|
# 1. TRAEFIK-MANAGED ACME HANDLER (Removed manual router)
|
|
|
|
# 2. THE HTTP CATCH-ALL (Sends other ACME and HTTP to Nginx)
|
|
nginx-legacy-router:
|
|
rule: "HostRegexp(`^.+$`)"
|
|
service: nginx-legacy-service
|
|
entryPoints:
|
|
- "web"
|
|
priority: 100
|
|
|
|
services:
|
|
nginx-legacy-service:
|
|
loadBalancer:
|
|
servers:
|
|
- url: "http://webserver:80" |