Attempted to create a certresolver with attached
version: "3.7"
networks:
t2_proxy:
external:
name: t2_proxy
default:
driver: bridge
services:
reverse-proxy:
image: traefik:v2.4
container_name: traefik
hostname: traefik
security_opt:
- no-new-privileges:true
command:
#- --configFile=/traefikbasic.yml
- --global.checkNewVersion=true
- --entryPoints.web.address=:80
- --entryPoints.websecure.address=:443
# Allow these IPs to set the X-Forwarded-* headers - Cloudflare IPs: https://www.cloudflare.com/ips/
- --entrypoints.websecure.forwardedHeaders.trustedIPs=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/12,172.64.0.0/13,131.0.72.0/22
- --entryPoints.traefik.address=:8080
- --api=true
- --api.insecure=true
- --api.dashboard=true
- --providers.docker
- --log=true
- --log.level=DEBUG
- --log.filePath=/traefik.event.log
- --accesslog=true
- --accesslog.bufferingSize=100 # Configuring a buffer of 100 lines
- --accesslog.filters.statusCodes=400-499
- --accesslog.filepath=/traefik.access.log
- --providers.docker=true
- --providers.docker.endpoint=unix:///var/run/docker.sock
- --providers.docker.defaultrule=Host(`{{ index .Labels "com.docker.compose.service" }}.${domain}`)
- --providers.docker.exposedByDefault=false
- --providers.docker.network=t2_proxy
- --providers.docker.swarmMode=false
- --providers.file.directory=/rules # Load dynamic configuration from one or more .toml or .yml files in a directory.
- --providers.file.watch=true # Only works on top level files in the rules folder
- --certificatesResolvers.cfresolver.acme.caServer=https://acme-staging-v02.api.letsencrypt.org/directory # LetsEncrypt Staging Server - uncomment when testing
- --certificatesResolvers.cfresolver.acme.email=/run/secrets/cloudflare_email
- --certificatesResolvers.cfresolver.acme.storage=/acme.json
- --certificatesResolvers.cfresolver.acme.dnsChallenge.provider=cloudflare
- --certificatesResolvers.cfresolver.acme.dnsChallenge.resolvers=1.1.1.1:53,1.0.0.1:53
ports:
- target: 80
published: 80
protocol: tcp
mode: host
- target: 443
published: 443
protocol: tcp
mode: host
- target: 8080
published: 8080
protocol: tcp
mode: host
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
- ${docker_dir}\traefik2\traefik.event.log:/traefik.event.log
- ${docker_dir}\traefik2\traefik.access.log:/traefik.access.log
- ${docker_dir}\traefik2\rules:/rules
- ${docker_dir}\shared\.htpasswd:/shared/.htpasswd
- ${docker_dir}\traefik2\acme\acme.json:/acme.json
environment:
- CF_API_EMAIL_FILE=/run/secret/cloudflare_email
- CF_API_KEY_FILE=/run/secret/cloudflare_api_key
networks:
t2_proxy:
ipv4_address: 192.168.86.254 # You can specify a static IP
labels:
- "traefik.enable=true"
# HTTP-to-HTTPS Redirect
- "traefik.http.routers.http-catchall.entrypoints=web"
- "traefik.http.routers.http-catchall.rule=HostRegexp(`{host:.+}`)"
- "traefik.http.routers.http-catchall.middlewares=redirect-to-https"
- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
# HTTP Routers
- "traefik.http.routers.traefik-rtr.entrypoints=websecure"
- "traefik.http.routers.traefik-rtr.rule=Host(`traefik.$DOMAINNAME`)"
- "traefik.http.routers.traefik-rtr.tls=true"
- "traefik.http.routers.traefik-rtr.tls.certresolver=cfresolver" # Comment out this line after first run of traefik to force the use of wildcard certs
- "traefik.http.routers.traefik-rtr.tls.domains[0].main=$DOMAINNAME"
- "traefik.http.routers.traefik-rtr.tls.domains[0].sans=*.$DOMAINNAME"
secrets:
cloudflare_email:
file: ${mdsrv_dir}\secrets\cloudflare\cloudflare_email
cloudflare_api_key:
file: ${mdsrv_dir}\secrets\cloudflare\cloudflare_api_key
.env file corresponding to variables in yml
############ Basics
PUID=1000
PGID=1000
TZ=Americas/New_York
docker_dir=C:\Users\marcus\mdsrv\docker
data_dir=C:\Users\marcus\mdsrv\data
mdsrv_dir=C:\Users\marcus\mdsrv
DOMAINNAME=someexample.com
Log File still says
time="2021-02-25T22:17:17Z" level=debug msg="Adding route for traefik.someexample.com with TLS options default" entryPointName=websecure
time="2021-02-25T22:17:17Z" level=error msg="the router traefik-rtr@docker uses a non-existent resolver: cfresolver"