From 5b586f26084f9177de12140031f5dcf9018fbeb6 Mon Sep 17 00:00:00 2001
From: Jake Howard <git@theorangeone.net>
Date: Mon, 13 Jun 2022 21:18:45 +0100
Subject: [PATCH] Add container to extract TLS certs from traefik into standard
 format

Disable its network access, just in case
---
 ansible/roles/traefik/files/docker-compose.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/ansible/roles/traefik/files/docker-compose.yml b/ansible/roles/traefik/files/docker-compose.yml
index f357f29..ab08a63 100644
--- a/ansible/roles/traefik/files/docker-compose.yml
+++ b/ansible/roles/traefik/files/docker-compose.yml
@@ -42,6 +42,14 @@ services:
     networks:
       - proxy_private
 
+  certs:
+    image: slocomptech/traefik-cert-extract:latest
+    restart: unless-stopped
+    networks: []
+    volumes:
+      - ./traefik:/data:ro
+      - ./certs:/config/certs
+
 networks:
   traefik:
     external: true