systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 17 Activity Actions

Use cloudflare DNS challenge for Traefik

Browse source
This commit is contained in:
Jake Howard 2020-09-05 18:27:04 +01:00
parent 0289342e2c
commit e9aeed26ee
Signed by: jake
GPG key ID: 57AFB45680EDD477
3 changed files with 12 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ansible/roles/traefik/files/docker-compose.yml
View file

@ -4,6 +4,8 @@ services:
traefik: traefik:
image: traefik:v2.2.8 image: traefik:v2.2.8
network_mode: host network_mode: host
environment:
- CF_DNS_API_TOKEN={{ cloudflare_api_token }}
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
- ./traefik:/etc/traefik - ./traefik:/etc/traefik

4
ansible/roles/traefik/files/traefik.yml
View file

@ -36,8 +36,8 @@ certificatesResolvers:
acme: acme:
email: hosting@theorangeone.net email: hosting@theorangeone.net
storage: /etc/traefik/acme.json storage: /etc/traefik/acme.json
httpChallenge: dnsChallenge:
entryPoint: web provider: cloudflare
serversTransport: serversTransport:
insecureSkipVerify: true insecureSkipVerify: true

8
ansible/roles/traefik/vars/main.yml Normal file
View file

@ -0,0 +1,8 @@
cloudflare_api_token: !vault |
$ANSIBLE_VAULT;1.1;AES256
34353463353334326561626566613464363537393238353437376463376135623831343634643735
6136613231333531356137326333616264663865363139630a653939343435393061666366643332
38646539666631646337396137376232373037643934356363666462333835643464613431346366
3466383231363632310a346661383838633630643236623561373962356635346162653936393562
32646530656632393133356436653365356163313961343837633138383561376237306638313362
3636373939656462613032653530643536643466363135346139