From b9c9625c358e6714437a44f44695e0eedc531adb Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Fri, 14 Nov 2025 01:50:26 +0200
Subject: [PATCH] Change traefik dashboard and n8n to local state

---
 .gitignore                   |  1 +
 traefik/dynamic/services.yml | 14 +++++++-------
 traefik/dynamic/tls.yml      | 10 ++++++++--
 3 files changed, 16 insertions(+), 9 deletions(-)

diff --git a/.gitignore b/.gitignore
index 59b6367..d549e37 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,3 +14,4 @@ adguardhome/*
 gitea/*
 traefik/dynamic/.services gigaforust copy.yml
 traefik/dynamic/.services workstation.yml
+traefik/logs/*
diff --git a/traefik/dynamic/services.yml b/traefik/dynamic/services.yml
index a4a0b55..1af0c9f 100644
--- a/traefik/dynamic/services.yml
+++ b/traefik/dynamic/services.yml
@@ -2,15 +2,15 @@ http:
   routers:
     # Traefik Dashboard
     traefik-dashboard:
-      rule: "Host(`traefik.forust.xyz`)"
+      rule: "Host(`traefik.workstation`)"
       entryPoints:
         - websecure
       service: api@internal
       middlewares:
-        - auth
+        # - auth
         - security-headers
-      tls:
-        certResolver: letsencrypt
+      tls: {}
+        # certResolver: letsencrypt
 
     # Portainer
     portainer:
@@ -89,14 +89,14 @@ http:
 
     # N8N
     n8n:
-      rule: "Host(`n8n.forust.xyz`)"
+      rule: "Host(`n8n.workstation`)"
       entryPoints:
         - websecure
       service: n8n
       middlewares:
         - security-headers
-      tls:
-        certResolver: letsencrypt
+      tls: {}
+        # certResolver: letsencrypt
 
     # Gitea
     gitea:
diff --git a/traefik/dynamic/tls.yml b/traefik/dynamic/tls.yml
index 9f7302b..9739be2 100644
--- a/traefik/dynamic/tls.yml
+++ b/traefik/dynamic/tls.yml
@@ -3,11 +3,17 @@ tls:
     - certFile: /certs/workstation+1.pem
       keyFile: /certs/workstation+1-key.pem
   
+  # stores:
+  #   default:
+  #     defaultCertificate:
+  #       certFile: /certs/workstation+1.pem
+  #       keyFile: /certs/workstation+1-key.pem
   stores:
     default:
       defaultCertificate:
-        certFile: /certs/workstation+1.pem
-        keyFile: /certs/workstation+1-key.pem
+        certFile: /etc/traefik/certs/cloudflare.pem
+        keyFile: /etc/traefik/certs/cloudflare.key
+
   
   options:
     default: