working configuration

traefik/docker-compose.yml

@@ -6,27 +6,18 @@ networks:
 
 services:
   traefik:
-    image: traefik:2.6
+    image: traefik:2.5
     container_name: traefik
     ports:
       - 80:80
       - 443:443
-      - 8080:8080
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - ./traefik.toml:/traefik.toml
       - ./traefik_dynamic.toml:/traefik_dynamic.toml
-      - /DATA/docker/traefik/certs:/certs
+      - /DATA/docker/services/certs:/certs
     environment:
       TZ: Europe/Paris
-#    labels:
-#      traefik.http.routers.traefik-metrics.entrypoints: websecure
-#      traefik.http.routers.traefik-metrics.rule: "Host(`${SERVER_NAME}`) && PathPrefix(`/metrics`)"
-#      traefik.http.routers.traefik-metrics.service: traefik-metrics
-#      traefik.http.routers.traefik-metrics.middlewares: "traefik-metrics-auth@docker"
-#      traefik.http.middlewares.traefik-metrics-auth.basicauth.users: "${METRICS_AUTH}"
-#      traefik.http.services.traefik-metrics.loadbalancer.server.port: 8082
-#      traefik.enable: true
     networks:
       - proxy
     restart: unless-stopped

traefik/traefik.toml

@@ -13,27 +13,24 @@
     [entryPoints.websecure.http]
       middlewares = ["hardening@file", "compression@file"]
       [entryPoints.websecure.http.tls]
-#        certResolver = "letsencrypt"
+        certResolver = "letsencrypt"
         options = "tls12@file"
- # [entryPoints.metrics]
- #   address = ":8082"
+  [entryPoints.metrics]
+    address = ":8082"
 
 [providers]
   providersThrottleDuration = "2s"
   [providers.docker]
     watch = true
     endpoint = "unix:///var/run/docker.sock"
-    exposedByDefault = true
+    exposedByDefault = false
     network = "proxy"
   [providers.file]
     filename = "/traefik_dynamic.toml"
     watch = true
 
-[api]
-  insecure = true
-
 [log]
-  level = "DEBUG"
+  level = "INFO"
 
 [accessLog]
   format = "json"
@@ -44,14 +41,10 @@
       "StartUTC" = "drop"
       "ClientUsername" = "drop"
 
-#[certificatesResolvers]
-#  [certificatesResolvers.letsencrypt]
-#    [certificatesResolvers.letsencrypt.acme]
-#      email = "picasoft@assos.utc.fr"
-#      storage = "/certs/acme.json"
-#      [certificatesResolvers.letsencrypt.acme.httpChallenge]
-#        entryPoint = "web"
-
-#[metrics]
-#  [metrics.prometheus]
-#    entryPoint = "metrics"
+[certificatesResolvers]
+  [certificatesResolvers.letsencrypt]
+    [certificatesResolvers.letsencrypt.acme]
+      email = "serveur@oasis21.org"
+      storage = "/certs/acme.json"
+      [certificatesResolvers.letsencrypt.acme.httpChallenge]
+        entryPoint = "web"