diff --git a/README.md b/README.md new file mode 100644 index 0000000..714f46f --- /dev/null +++ b/README.md @@ -0,0 +1,5 @@ +run on stratholme: + +``` +docker-compose -f docker-compose.stratholme.yml up +``` diff --git a/config/dynamic/tls.yml b/config/dynamic/tls.yml new file mode 100644 index 0000000..94311c1 --- /dev/null +++ b/config/dynamic/tls.yml @@ -0,0 +1,11 @@ +tls: + options: + default: + minVersion: VersionTLS12 + cipherSuites: + - TLS_CHACHA20_POLY1305_SHA256 + - TLS_AES_128_GCM_SHA256 + - TLS_AES_256_GCM_SHA384 + - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 + - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 diff --git a/config/dynamic_conf.toml b/config/dynamic_conf.toml deleted file mode 100644 index 134c242..0000000 --- a/config/dynamic_conf.toml +++ /dev/null @@ -1,14 +0,0 @@ -[tls.options] - [tls.options.default] - minVersion = "VersionTLS12" - cipherSuites = [ - "TLS_CHACHA20_POLY1305_SHA256", - "TLS_AES_128_GCM_SHA256", - "TLS_AES_256_GCM_SHA384", - "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" - ] - [tls.options.mintls13] - minVersion = "VersionTLS13" - diff --git a/config/traefik.toml b/config/traefik.toml index 4703d32..2da232f 100644 --- a/config/traefik.toml +++ b/config/traefik.toml @@ -38,7 +38,8 @@ # we are loading an additional file, as some options can only be defined # in a 'dynamic' file config, not in this main config file. [providers.file] - filename = "/etc/traefik/dynamic_conf.toml" + directory = "/etc/traefik/dynamic" + watch = true [certificatesResolvers.default.acme] email = "hostmaster@zom.bi" @@ -55,4 +56,3 @@ [[tls.certificates]] certFile = "cert/grun.host.origin.pem" keyFile = "cert/grun.host.origin.key" - diff --git a/docker-compose.yml b/docker-compose.yml index 02b3593..ce50979 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -6,11 +6,11 @@ services: ports: - "80:80" - "443:443" - - "10.0.0.1:8080:8080" volumes: - "/var/run/docker.sock:/var/run/docker.sock:ro" - "./cert/:/cert/" - "./config/:/etc/traefik/:ro" + - "./config/dynamic/:/etc/traefik/dynamic/:ro" labels: - "traefik.enable=true" # set to true to expose the Monitoring & API # middleware redirect