enable tls

.gitignore

@@ -1,4 +1,5 @@
 docs/build
-log/*.log
+traefik/log/*.log
-log/*.gz
+traefik/log/*.gz
+traefik/tls/*.json
 .local

compose.yml

@@ -17,8 +17,9 @@ services:
       - 8080:8080
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
-      - ./traefik:/etc/traefik:ro
+      - ./traefik/etc:/etc/traefik:ro
-      - ./log:/var/log/traefik:rw
+      - ./traefik/log:/var/log/traefik
+      - ./traefik/tls:/letsencrypt
 
   nginx:
     image: nginx:latest
@@ -27,6 +28,7 @@ services:
       - traefik.http.routers.rskio.entrypoints=websecure
       - traefik.http.routers.rskio.rule=Host(`rskio.com`)
       - traefik.http.routers.rskio.tls=true
+      - traefik.http.routers.rskio.tls.certresolver=rskio_certresolver
       - traefik.http.routers.rskio.service=rskio@docker
       - traefik.http.services.rskio.loadbalancer.server.port=80
     volumes:

traefik/etc/traefik.yml

@@ -15,6 +15,13 @@ entryPoints:
     http3:
       advertisedPort: 443
 
+certificatesresolvers:
+  rskio_certresolver:
+    acme:
+      tlschallenge: true
+      email: rskntroot@gmail.com
+      storage: /letsencrypt/acme.json
+
 log:
   level: INFO
   format: json