In this short post, I show how to use the traefik image in docker compose to publish your site with your domain name and generate an ssl certificate.
I - Create the traefik.toml file
- Create the traefik.tom file
- Copy the following code into it
- Add your email address at the end of the file
[api]dashboard=trueinsecure=true[entryPoints][entryPoints.web]address=":80"[entryPoints.web.http][entryPoints.web.http.redirections][entryPoints.web.http.redirections.entryPoint]to="websecure"scheme="https"permanent=true[entryPoints.websecure]address=":443"[entryPoints.websecure.http.tls]certResolver="default"[providers][providers.docker]watch=trueexposedByDefault=falsenetwork="web"[certificatesResolvers][certificatesResolvers.default][certificatesResolvers.default.acme]email=""storage="acme.json"caServer="https://acme-v02.api.letsencrypt.org/directory"[certificatesResolvers.default.acme.tlsChallenge]II - Create the acme.json file
This file is used to store https certificates.
You must assign the correct right as in the following example.
touchacme.jsonchmod600 acme.jsonIII - Create network
- Type the following command in your terminal
docker network create web- Add this code to the end of your docker-compose file
networks:web:external:trueIV - Traefik docker image
Here's the docker-compose block to call traefik, share the http and https ports and the many configuration files.
D'ont fortget to add the network we've just created inside.
Port 8080 is the traefik interface, so you don't have to add it.
The different labels are used to accept www subdomains.
reverse-proxy:image:traefik:v2.4container_name:traefikports:-"80:80"-"8080:8080"-"443:443"volumes:-/var/run/docker.sock:/var/run/docker.sock-traefik.toml:/etc/traefik/traefik.toml-acme.json:/acme.jsonlabels:-"traefik.http.middlewares.strip-www.redirectregex.regex=^https?://(www\\.)(.+)"-"traefik.http.middlewares.strip-www.redirectregex.replacement=https://$${2}"-"traefik.http.middlewares.strip-www.redirectregex.permanent=true"restart:alwaysnetworks:-webV - Configure traefik for your docker compose service
In your other block, you need to add the network and the various labels.
The first label is to activate traefik, the second to add your domain or sub-domain (don't forget to change the name of your router --> in this example it's api and front), the last is to redirect to https.
api:build:api/labels:-"traefik.enable=true"-"traefik.http.routers.api.rule=Host(`api.monsite.fr`)"-"traefik.http.routers.api.entrypoints=websecure"networks:-webrestart:alwaysfront:build:context:front/dockerfile:Dockerfile.prodlabels:-"traefik.enable=true"-"traefik.http.routers.front.rule=Host(`monsite.fr`)"-"traefik.http.routers.front.entrypoints=websecure"networks:-webTop comments(0)
For further actions, you may consider blocking this person and/orreporting abuse
