Compare commits

..

No commits in common. "0efdd63427c968dcbf902582b9f3583f48bd2151" and "1877aa338ff0024864093ead44862b8afa9a7ebb" have entirely different histories.

3 changed files with 16 additions and 18 deletions

View file

@ -1,11 +0,0 @@
tls:
options:
default:
minVersion: VersionTLS12
cipherSuites:
- TLS_CHACHA20_POLY1305_SHA256
- TLS_AES_128_GCM_SHA256
- TLS_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

View file

@ -34,10 +34,6 @@
exposedByDefault = false exposedByDefault = false
defaultRule = "Host(`{{ normalize .Name }}.docker.localhost`)" defaultRule = "Host(`{{ normalize .Name }}.docker.localhost`)"
[providers.file]
directory = "/etc/traefik/dynamic"
watch = true
[certificatesResolvers.default.acme] [certificatesResolvers.default.acme]
email = "hostmaster@zom.bi" email = "hostmaster@zom.bi"
storage = "/cert/acme.json" storage = "/cert/acme.json"
@ -52,4 +48,18 @@
keyFile = "cert/bitmask.me.origin.key" keyFile = "cert/bitmask.me.origin.key"
[[tls.certificates]] [[tls.certificates]]
certFile = "cert/grun.host.origin.pem" certFile = "cert/grun.host.origin.pem"
keyFile = "cert/grun.host.origin.key" keyFile = "cert/grun.host.origin.key"
[tls.options]
[tls.options.default]
minVersion = "VersionTLS12"
cipherSuites = [
"TLS_CHACHA20_POLY1305_SHA256",
"TLS_AES_128_GCM_SHA256",
"TLS_AES_256_GCM_SHA384",
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
]
[tls.options.mintls13]
minVersion = "VersionTLS13"

View file

@ -2,7 +2,7 @@ version: '2'
services: services:
proxy: proxy:
image: traefik:v2.3 image: traefik:v2.1
ports: ports:
- "80:80" - "80:80"
- "443:443" - "443:443"
@ -10,7 +10,6 @@ services:
- "/var/run/docker.sock:/var/run/docker.sock:ro" - "/var/run/docker.sock:/var/run/docker.sock:ro"
- "./cert/:/cert/" - "./cert/:/cert/"
- "./config/:/etc/traefik/:ro" - "./config/:/etc/traefik/:ro"
- "./config/dynamic/:/etc/traefik/dynamic/:ro"
labels: labels:
- "traefik.enable=true" # set to true to expose the Monitoring & API - "traefik.enable=true" # set to true to expose the Monitoring & API
# middleware redirect # middleware redirect