|
|
|
@@ -29,6 +29,45 @@ devture_traefik_config_entrypoint_web_secure_enabled: false |
|
|
|
|
|
|
|
## Using self-signed SSL certificates |
|
|
|
|
|
|
|
Using self-signed certificates with Traefik is a somewhat involved processes, where you need to manually mount the files into the container and adjust the "static" configuration to refer to them. |
|
|
|
To use self-signed SSL certificates, you need to disable the certResolvers and the traefik-certs-dumper tool. |
|
|
|
You also need to override the providers.file setting in the Traefik configs. |
|
|
|
Create a file 'certificates.yml' in /devture-traefik/config/ with the following content: |
|
|
|
|
|
|
|
Feel free to research this approach on your own and improve this guide! |
|
|
|
```yaml |
|
|
|
tls: |
|
|
|
certificates: |
|
|
|
- certFile: /ssl/cert.pem |
|
|
|
keyFile: /ssl/privkey.pem |
|
|
|
stores: |
|
|
|
default: |
|
|
|
defaultCertificate: |
|
|
|
certFile: /ssl/cert.pem |
|
|
|
keyFile: /ssl/privkey.pem |
|
|
|
``` |
|
|
|
|
|
|
|
Place the key and your certificate in /devture-traefik/ssl/ |
|
|
|
You can use the matrix-aux role for this: |
|
|
|
|
|
|
|
```yaml |
|
|
|
matrix_aux_file_definitions: |
|
|
|
- dest: /devture-traefik/ssl/privkey.pem |
|
|
|
src: /path/to/privkey.pem |
|
|
|
- dest: /devture-traefik/ssl/cert.pem |
|
|
|
src: /path/to/cert.pem |
|
|
|
- dest: /devture-traefik/config/certificates.yml |
|
|
|
src: /path/to/certificates.yml |
|
|
|
``` |
|
|
|
|
|
|
|
Then add the following to your vars.yml: |
|
|
|
|
|
|
|
```yaml |
|
|
|
devture_traefik_config_certificatesResolvers_acme_enabled: false |
|
|
|
devture_traefik_certResolver_primary: '' |
|
|
|
devture_traefik_ssl_dir_enabled: true |
|
|
|
devture_traefik_configuration_extension_yaml: | |
|
|
|
providers: |
|
|
|
file: |
|
|
|
filename: /config/certificates.yml |
|
|
|
watch: true |
|
|
|
matrix_playbook_traefik_certs_dumper_role_enabled: false |
|
|
|
``` |