Ryfujk

putting logo on same line but after title, latex

Non-trope happy ending?

Redundant comparison & "if" before assignment

Electoral considerations aside, what are potential benefits, for the US, of policy changes proposed by the tweet recognizing Golan annexation?

Are Captain Marvel's powers affected by Thanos' actions in Infinity War

How to rewrite equation of hyperbola in standard form

Why is this estimator biased?

How does a computer interpret real numbers?

How can "mimic phobia" be cured or prevented?

What is Cash Advance APR?

Lowest total scrabble score

Strong empirical falsification of quantum mechanics based on vacuum energy density

On a tidally locked planet, would time be quantized?

Biological Blimps: Propulsion

Why should universal income be universal?

How much character growth crosses the line into breaking the character

The IT department bottlenecks progress. How should I handle this?

Does Doodling or Improvising on the Piano Have Any Benefits?

Is there an injective, monotonically increasing, strictly concave function from the reals, to the reals?

How do you respond to a colleague from another team when they're wrongly expecting that you'll help them?

Why Shazam when there is already Superman?

Can a College of Swords bard use a Blade Flourish option on an opportunity attack provoked by their own Dissonant Whispers spell?

Quoting Keynes in a lecture

How to cover method return statement in Apex Class?

Internal Search Domains & LetsEncrypt TLS on Traefik

Utilising TLS within internal search domains

0

I'm running Traefik in a docker container with a wildcard certificate provided for my domain by Cloudflare using ACME. The upstream DNS server is configured to return a local IP, and ACME is done via DNS authentication since the sites aren't accessible via the internet.

This is the docker-compose for my Traefik installation, showing the labels I'm trying to get working:

version: '3'



services:

  traefik:

    image: traefik

    restart: always

    ports:

      - "80:80"

      - "443:443"

      - "8080:8080"

    volumes:

      - /var/run/docker.sock:/var/run/docker.sock

      - ./traefik.toml:/traefik.toml

      - ./acme.json:/acme.json

    networks:

      - web

    environment:

      - CF_API_EMAIL=<snip>

      - CF_API_KEY=<snip>

    labels:

      - "traefik.frontend.rule=Host:traefik.local.domain.com"

      - "traefik.frontend.redirect.regex=^http://traefik.local.domain.com/"

      - "traefik.frontend.redirect.replacement=http://traefik.local.domain.com/dashboard/"

      - "traefik.port=8080"



networks:

  web:

This works great when I go directly to traefik.local.domain.com. The SSL cert works fine and everything looks how it should.

However, to try and simplify things even more I added local.domain.com to my DHCP options as a search domain. Unfortunately, going to traefik/ then causes traefik to use the wrong TLS cert, as it doesn't realise I'm connecting to the same backend.

I was able to get this working without TLS by using the rules

  - "traefik.frontend.rule=Host:traefik.local.domain.com,traefik"

  - "traefik.frontend.redirect.regex=^https?://(traefik.local.domain.com|traefik)/?"

  - "traefik.frontend.redirect.replacement=http://traefik.local.domain.com/dashboard/"

and disabling ACME so the DNS validation doesn't fail, but I'd really like to use TLS inside the network, just without having to type the entire domain.

I would rather not have to go to **http**://traefik/ to be redirected to https://traefik.local.domain.com, but I fear this might be the only option (and I'm not sure how to configure that in Traefik as well).

There is a related question here, but it uses the above redirection method, which I'd like to avoid.

ubuntu ssl web-server docker

share

asked 2 mins ago

Connor BellConnor Bell

815

add a comment | 

0

I'm running Traefik in a docker container with a wildcard certificate provided for my domain by Cloudflare using ACME. The upstream DNS server is configured to return a local IP, and ACME is done via DNS authentication since the sites aren't accessible via the internet.

This is the docker-compose for my Traefik installation, showing the labels I'm trying to get working:

version: '3'



services:

  traefik:

    image: traefik

    restart: always

    ports:

      - "80:80"

      - "443:443"

      - "8080:8080"

    volumes:

      - /var/run/docker.sock:/var/run/docker.sock

      - ./traefik.toml:/traefik.toml

      - ./acme.json:/acme.json

    networks:

      - web

    environment:

      - CF_API_EMAIL=<snip>

      - CF_API_KEY=<snip>

    labels:

      - "traefik.frontend.rule=Host:traefik.local.domain.com"

      - "traefik.frontend.redirect.regex=^http://traefik.local.domain.com/"

      - "traefik.frontend.redirect.replacement=http://traefik.local.domain.com/dashboard/"

      - "traefik.port=8080"



networks:

  web:

This works great when I go directly to traefik.local.domain.com. The SSL cert works fine and everything looks how it should.

However, to try and simplify things even more I added local.domain.com to my DHCP options as a search domain. Unfortunately, going to traefik/ then causes traefik to use the wrong TLS cert, as it doesn't realise I'm connecting to the same backend.

I was able to get this working without TLS by using the rules

  - "traefik.frontend.rule=Host:traefik.local.domain.com,traefik"

  - "traefik.frontend.redirect.regex=^https?://(traefik.local.domain.com|traefik)/?"

  - "traefik.frontend.redirect.replacement=http://traefik.local.domain.com/dashboard/"

and disabling ACME so the DNS validation doesn't fail, but I'd really like to use TLS inside the network, just without having to type the entire domain.

I would rather not have to go to **http**://traefik/ to be redirected to https://traefik.local.domain.com, but I fear this might be the only option (and I'm not sure how to configure that in Traefik as well).

There is a related question here, but it uses the above redirection method, which I'd like to avoid.

ubuntu ssl web-server docker

share

asked 2 mins ago

Connor BellConnor Bell

815

add a comment | 

I'm running Traefik in a docker container with a wildcard certificate provided for my domain by Cloudflare using ACME. The upstream DNS server is configured to return a local IP, and ACME is done via DNS authentication since the sites aren't accessible via the internet.

This is the docker-compose for my Traefik installation, showing the labels I'm trying to get working:

version: '3'



services:

  traefik:

    image: traefik

    restart: always

    ports:

      - "80:80"

      - "443:443"

      - "8080:8080"

    volumes:

      - /var/run/docker.sock:/var/run/docker.sock

      - ./traefik.toml:/traefik.toml

      - ./acme.json:/acme.json

    networks:

      - web

    environment:

      - CF_API_EMAIL=<snip>

      - CF_API_KEY=<snip>

    labels:

      - "traefik.frontend.rule=Host:traefik.local.domain.com"

      - "traefik.frontend.redirect.regex=^http://traefik.local.domain.com/"

      - "traefik.frontend.redirect.replacement=http://traefik.local.domain.com/dashboard/"

      - "traefik.port=8080"



networks:

  web:

This works great when I go directly to traefik.local.domain.com. The SSL cert works fine and everything looks how it should.

However, to try and simplify things even more I added local.domain.com to my DHCP options as a search domain. Unfortunately, going to traefik/ then causes traefik to use the wrong TLS cert, as it doesn't realise I'm connecting to the same backend.

I was able to get this working without TLS by using the rules

  - "traefik.frontend.rule=Host:traefik.local.domain.com,traefik"

  - "traefik.frontend.redirect.regex=^https?://(traefik.local.domain.com|traefik)/?"

  - "traefik.frontend.redirect.replacement=http://traefik.local.domain.com/dashboard/"

and disabling ACME so the DNS validation doesn't fail, but I'd really like to use TLS inside the network, just without having to type the entire domain.

I would rather not have to go to **http**://traefik/ to be redirected to https://traefik.local.domain.com, but I fear this might be the only option (and I'm not sure how to configure that in Traefik as well).

There is a related question here, but it uses the above redirection method, which I'd like to avoid.

ubuntu ssl web-server docker

share

asked 2 mins ago

Connor BellConnor Bell

815

version: '3'



services:

  traefik:

    image: traefik

    restart: always

    ports:

      - "80:80"

      - "443:443"

      - "8080:8080"

    volumes:

      - /var/run/docker.sock:/var/run/docker.sock

      - ./traefik.toml:/traefik.toml

      - ./acme.json:/acme.json

    networks:

      - web

    environment:

      - CF_API_EMAIL=<snip>

      - CF_API_KEY=<snip>

    labels:

      - "traefik.frontend.rule=Host:traefik.local.domain.com"

      - "traefik.frontend.redirect.regex=^http://traefik.local.domain.com/"

      - "traefik.frontend.redirect.replacement=http://traefik.local.domain.com/dashboard/"

      - "traefik.port=8080"



networks:

  web:

  - "traefik.frontend.rule=Host:traefik.local.domain.com,traefik"

  - "traefik.frontend.redirect.regex=^https?://(traefik.local.domain.com|traefik)/?"

  - "traefik.frontend.redirect.replacement=http://traefik.local.domain.com/dashboard/"

share

asked 2 mins ago

Connor BellConnor Bell

815

share

asked 2 mins ago

Connor BellConnor Bell

815

asked 2 mins ago

Connor BellConnor Bell

815

asked 2 mins ago

Connor BellConnor Bell

815