Refactor Traefik configuration for improved TLS settings and service routing

traefik/dynamic/services.yml

@@ -6,8 +6,7 @@ http:
       entryPoints:
         - websecure
       service: api@internal
-      tls:
-        certResolver: le
+      tls: {}
 
     # Portainer
     portainer:
@@ -15,8 +14,7 @@ http:
       entryPoints:
         - websecure
       service: portainer
-      tls:
-        certResolver: le
+      tls: {}
 
     # AdGuard Home
     adguard-redirect:
@@ -32,8 +30,7 @@ http:
       entryPoints:
         - websecure
       service: adguard
-      tls:
-        certResolver: le
+      tls: {}
 
     # Nextcloud AIO Interface
     nextcloud-aio:
@@ -41,8 +38,7 @@ http:
       entryPoints:
         - websecure
       service: nextcloud-aio
-      tls:
-        certResolver: le
+      tls: {}
 
     # Nextcloud Main
     nextcloud:
@@ -50,8 +46,7 @@ http:
       entryPoints:
         - websecure
       service: nextcloud
-      tls:
-        certResolver: le
+      tls: {}
 
     # Dockmon
     dockmon:
@@ -59,8 +54,7 @@ http:
       entryPoints:
         - websecure
       service: dockmon
-      tls:
-        certResolver: le
+      tls: {}
 
     # Glance
     glance:
@@ -68,8 +62,7 @@ http:
       entryPoints:
         - websecure
       service: glance
-      tls:
-        certResolver: le
+      tls: {}
 
     # Watercrawl (edu_master)
     watercrawl:
@@ -77,8 +70,7 @@ http:
       entryPoints:
         - websecure
       service: watercrawl
-      tls:
-        certResolver: le
+      tls: {}
 
     # N8N
     n8n:
@@ -86,8 +78,7 @@ http:
       entryPoints:
         - websecure
       service: n8n
-      tls:
-        certResolver: le
+      tls: {}
 
   services:
     # Portainer

traefik/dynamic/tls.yml

@@ -1,4 +1,19 @@
 tls:
   certificates:
-    - certFile: /certs/workstation+3.pem
-      keyFile: /certs/workstation+3-key.pem
+    - certFile: /certs/workstation+1.pem
+      keyFile: /certs/workstation+1-key.pem
+  
+  stores:
+    default:
+      defaultCertificate:
+        certFile: /certs/workstation+1.pem
+        keyFile: /certs/workstation+1-key.pem
+  
+  options:
+    default:
+      minVersion: VersionTLS12
+      sniStrict: true
+      cipherSuites:
+        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305