cloudflare + letsencrypt

traefik-docker-compose.yaml

@@ -14,26 +14,49 @@ services:
       - "--entryPoints.websecure.http.tls=true"
       - "--entryPoints.web.http.redirections.entryPoint.to=websecure"
       - "--entryPoints.web.http.redirections.entryPoint.scheme=https"
-      - "--serversTransport.insecureSkipVerify=true"
       - "--providers.file.directory=/etc/traefik/dynamic"
       - "--providers.file.watch=true"
+      
+      # Let's Encrypt STAGING
+      - "--certificatesresolvers.letsencrypt.acme.email=${EMAIL}"
+      - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
+      - "--certificatesresolvers.letsencrypt.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
+      - "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
+      - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
+      
+      # Cloudflare - получение реальных IP
+      - "--entryPoints.web.forwardedHeaders.trustedIPs=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22"
+      - "--entryPoints.websecure.forwardedHeaders.trustedIPs=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22"
+      
+      # Логирование для отладки
+      - "--log.level=DEBUG"
+      - "--log.filePath=/var/log/traefik/traefik.log"
+      - "--accesslog=true"
+      - "--accesslog.filepath=/var/log/traefik/access.log"
+      
     labels:
       - "traefik.enable=true"
       - "traefik.docker.network=traefik-proxy"
       - glance.name=Traefik
-      # - glance.icon=si:traefik
       - glance.url=https://traefik.${HOST}/
-      - glance.description=Traefik is a modern reverse proxy and load balancer that makes deploying microservices easy.
+      - glance.description=Traefik is a modern reverse proxy and load balancer
+      
     ports:
       - "80:80"
       - "443:443"
-      - "8080:8080"
+      
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
-      - ./traefik/certs:/certs:ro
+      - ./traefik/letsencrypt:/letsencrypt
       - ./traefik/dynamic:/etc/traefik/dynamic:ro
+      - ./traefik/logs:/var/log/traefik
+      - ./traefik/certs:/certs:ro
+      
     networks:
-      - traefik-proxy 
+      - traefik-proxy
+      
+    environment:
+      - TZ=Europe/Bratislava
 
 networks:
   traefik-proxy: