mirror of https://github.com/ChristianLempa/boilerplates.git synced 2024-12-28 18:09:03 +01:00

Christian c183de3803 Add readme for cert-manager

Fixes #35 and cipher security for traefik

2022-02-21 09:41:33 +01:00

1.1 KiB

Raw Blame History

Installation

TODO: #21 Improve traefik docu

Data Persistence

... Storing Data in the /etc/traefik directory on the host, passing through...

    volumes:
      - /etc/traefik:/etc/traefik

Self-Signed Certificates

According to traefik's documentation it will automatically generate self-signed Certificates if no Default Certificate is provided. If you'd like to overwrite the self-signed Certificate with your own, uncomment the section for

# (Optional) Overwrite Default Certificates
tls:
  stores:
    default:
      defaultCertificate:
        certFile: /etc/traefik/certs/cert.pem
        keyFile: /etc/traefik/certs/cert-key.pem

Replace the /etc/traefik/certs/cert.pem with your certificate file, and the /etc/traefik/certs/cert-key.pem with your certificate key.

Best-Practices & Post-Installation

MinTLS Version

TLS 1.0 and 1.1 are not longer secure! Consider disabling it in the Traefik Configuration.

providers:
  docker:
    exposedByDefault: false  # Default is true
  file:
    # watch for dynamic configuration changes
    directory: /etc/traefik
    watch: true

1.1 KiB Raw Blame History