diff --git a/.env.sample b/.env.sample index c7a6d8c..bd31b62 100644 --- a/.env.sample +++ b/.env.sample @@ -3,6 +3,7 @@ TYPE=traefik DOMAIN=traefik.example.com LETS_ENCRYPT_ENV=production +LETS_ENCRYPT_DISABLED=0 LETS_ENCRYPT_EMAIL=certs@example.com # DASHBOARD_ENABLED=true # WARN, INFO etc. diff --git a/abra.sh b/abra.sh index 78e8033..a088563 100644 --- a/abra.sh +++ b/abra.sh @@ -1,2 +1,2 @@ -export TRAEFIK_YML_VERSION=v5 +export TRAEFIK_YML_VERSION=v7 export FILE_PROVIDER_YML_VERSION=v1 diff --git a/compose.yml b/compose.yml index 1d01c14..afc6e93 100644 --- a/compose.yml +++ b/compose.yml @@ -19,6 +19,8 @@ services: - proxy environment: - DASHBOARD_ENABLED + - LETS_ENCRYPT_DISABLED + - LETS_ENCRYPT_EMAIL - FOODSOFT_SMTP_ENABLED - GITEA_SSH_ENABLED - LOG_LEVEL @@ -38,7 +40,7 @@ services: - "traefik.http.services.traefik.loadbalancer.server.port=web" - "traefik.http.routers.traefik.rule=Host(`${DOMAIN}`)" - "traefik.http.routers.traefik.entrypoints=web-secure" - - "traefik.http.routers.traefik.tls.certresolver=${LETS_ENCRYPT_ENV}" + #- "traefik.http.routers.traefik.tls.certresolver=${LETS_ENCRYPT_ENV}" - "traefik.http.routers.traefik.tls.options=default@file" - "traefik.http.routers.traefik.service=api@internal" - "traefik.http.routers.traefik.middlewares=security@file" diff --git a/traefik.yml b/traefik.yml index 787d26f..f0dff7e 100644 --- a/traefik.yml +++ b/traefik.yml @@ -40,6 +40,7 @@ entrypoints: ping: entryPoint: web +{{ if not (eq (env "LETS_ENCRYPT_DISABLED") "1") }} certificatesResolvers: staging: acme: @@ -54,3 +55,4 @@ certificatesResolvers: storage: /etc/letsencrypt/production-acme.json httpChallenge: entryPoint: web +{{ end }}