Initial

Signed-off-by: Tobias Manske <tobias.manske@mailbox.org>

compose/00_traefik/.env

@@ -0,0 +1 @@
+COMPOSE_PROJECT_NAME=traefik

compose/00_traefik/docker-compose.yaml

@@ -0,0 +1,31 @@
+---
+version: '3.9'
+services:
+  traefik:
+    image: traefik:v2.7
+    container_name: traefik
+    restart: always
+    ports:
+      - "443:443"
+      - "80:80"
+    privileged: true
+    volumes:
+      - "/var/run/docker.sock:/var/run/docker.sock:z"
+      - "./traefik.yaml:/etc/traefik/traefik.yaml:Z,ro"
+      - "acme:/acme"
+    networks:
+      - gateway
+      - default
+    environment:
+      CLOUDFLARE_DNS_API_TOKEN: "{{ traefik.CLOUDFLARE_DNS_API_TOKEN }}"
+
+volumes:
+  acme:
+
+networks:
+  gateway:
+    name: gateway
+    internal: false
+  default:
+    driver: bridge
+...

compose/00_traefik/traefik.yaml

@@ -0,0 +1,29 @@
+log:
+  level: DEBUG
+providers:
+  docker:
+    network: gateway
+    exposedbydefault: false
+entryPoints:
+  web:
+    address: ":80"
+    http:
+      redirections:
+        entryPoint:
+          to: websecure
+          scheme: https
+          permanent: true
+  websecure:
+    address: ":443"
+    http:
+      tls:
+        certResolver: letsencrypt
+
+certificatesResolvers:
+  letsencrypt:
+    acme:
+      email: webmaster@tobiasmanske.de
+      storage: /acme/acme.json
+      # caServer: "https://acme-staging-v02.api.letsencrypt.org/directory"
+      dnsChallenge:
+        provider: cloudflare