Add container to extract TLS certs from traefik into standard format

Disable its network access, just in case

ansible/roles/traefik/files/docker-compose.yml

@@ -42,6 +42,14 @@ services:
     networks:
       - proxy_private
 
+  certs:
+    image: slocomptech/traefik-cert-extract:latest
+    restart: unless-stopped
+    networks: []
+    volumes:
+      - ./traefik:/data:ro
+      - ./certs:/config/certs
+
 networks:
   traefik:
     external: true