1

traefik/auth-middleware.yml

@@ -0,0 +1,6 @@
+http:
+  middlewares:
+    auth:
+      basicauth:
+        users:
+          - 'admin:!!!'

traefik/certificates.yml

@@ -0,0 +1,26 @@
+tls:
+  stores:
+    default:
+      defaultCertificate:
+        certFile: /certs/star_example.org/fullchain.cer
+        keyFile: /certs/star_example.org/star_example.org.key
+  certificates:
+    - certFile: /certs/star_example.org/fullchain.cer
+      keyFile: /certs/star_example.org/star_example.org.key
+       
+      stores:
+        - default
+  options:
+    default:
+      minVersion: VersionTLS12
+      alpnProtocols:
+        - http/1.1
+        - h2
+      preferServerCipherSuites: true
+      cipherSuites:
+        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+        - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
+        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
+        - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+

traefik/traefik.toml

@@ -0,0 +1,23 @@
+[entryPoints.http]
+    address = ":80"
+    [entryPoints.http.http.redirections.entryPoint]
+        to = "https"
+        scheme = "https"
+    [entryPoints.https]
+        address = ":443"
+
+[http.middleware]
+
+[api]
+    dashboard = true
+
+[providers]
+[providers.docker]
+    useBindPortIP = true
+    exposedByDefault = false
+[providers.file]
+    directory = "/etc/traefik-config/"
+    watch = true
+    debugLogGeneratedTemplate = true
+
+[accessLog]