Treafik 版本 2.5Traefik.toml 文件# 入口点配置[entryPoints] [entryPoints.web] 地址 = \':80\' [entryPoints.websecure] 地址 = \':443\' [
Treafik 版本 2.5
Traefik.toml 文件
# Entry Points Configuration
[entryPoints]
[entryPoints.web]
address = ":80"
[entryPoints.websecure]
address = ":443"
[entryPoints.websecure.http.tls]
# Providers Configuration
[providers]
[providers.docker]
endpoint = "unix:///var/run/docker.sock"
exposedByDefault = false
# TLS Certificates Configuration
[tls]
[[tls.certificates]]
certFile = "/certs/certificate.crt"
keyFile = "/certs/private.key"
stores = ["default"]
# TLS Stores Configuration
[tls.stores]
[tls.stores.default]
[tls.stores.default.defaultCertificate]
certFile = "/certs/certificate.crt"
keyFile = "/certs/private.key"
# TLS Options Configuration
[tls.options]
[tls.options.default]
minVersion = "VersionTLS12"
maxVersion = "VersionTLS13"
cipherSuites = [
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
]
curvePreferences = ["CurveP521", "CurveP384"]
sniStrict = true
# API Configuration
[api]
dashboard = true
insecure = true
docker-compose.yml 文件
version: '3.3'
services:
traefik:
image: traefik:v2.5
command:
- --configFile=/traefik.toml
ports:
- "80:80"
- "443:443"
- "8080:8080"
volumes:
- "/var/run/docker.sock:/var/run/docker.sock"
- "/certs:/certs"
- "./traefik.toml:/traefik.toml"
labels:
- "traefik.enable=true"
- "traefik.http.routers.api.rule=Host(`example`)"
- "traefik.http.routers.api.service=api@internal"
- "traefik.http.routers.api.entrypoints=websecure"
backend:
build: ./backend
labels:
- "traefik.enable=true"
- "traefik.http.routers.backend.rule=Host(`example`)"
- "traefik.http.services.backend.loadbalancer.server.port=4000"
- "traefik.http.routers.backend.entrypoints=websecure"
env_file:
- ./backend/.env
volumes:
- ./backend/upload/images:/app/backend/upload/images
frontend:
build: ./frontend
labels:
- "traefik.enable=true"
- "traefik.http.routers.frontend.rule=Host(`example`, `example`)"
- "traefik.http.services.frontend.loadbalancer.server.port=3000"
- "traefik.http.routers.frontend.entrypoints=websecure"
env_file:
- ./frontend/.env
admin:
build: ./admin
labels:
- "traefik.enable=true"
- "traefik.http.routers.admin.rule=Host(`example`)"
- "traefik.http.services.admin.loadbalancer.server.port=5173"
- "traefik.http.routers.admin.entrypoints=websecure"
env_file:
- ./admin/.env
SSL Checker 状态:(查看图片)
我的 LCN DNS 记录:所有 A 都指向正确的 IP 地址
DNS 检查状态已解决
root@ubuntu-s-2vcpu-4gb-amd-lon1-01:/home/root/example# docker exec -it $(docker ps -qf "name=example_traefik_1") sh -c 'ls -l /certs; cat /traefik.toml'
total 8
-rw-r--r-- 1 root root 2244 Jun 24 10:53 certificate.crt
-rw------- 1 root root 1704 Jun 20 14:49 private.key
# Entry Points Configuration
[entryPoints]
[entryPoints.web]
address = ":80"
[entryPoints.websecure]
address = ":443"
[entryPoints.websecure.http.tls]
# Providers Configuration
[providers]
[providers.docker]
endpoint = "unix:///var/run/docker.sock"
exposedByDefault = false
# TLS Certificates Configuration
[tls]
[[tls.certificates]]
certFile = "/certs/certificate.crt"
keyFile = "/certs/private.key"
stores = ["default"]
# TLS Stores Configuration
[tls.stores]
[tls.stores.default]
[tls.stores.default.defaultCertificate]
certFile = "/certs/certificate.crt"
keyFile = "/certs/private.key"
# TLS Options Configuration
[tls.options]
[tls.options.default]
minVersion = "VersionTLS12"
maxVersion = "VersionTLS13"
cipherSuites = [
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
]
curvePreferences = ["CurveP521", "CurveP384"]
sniStrict = true
# API Configuration
[api]
dashboard = true
insecure = true
完全不知道我遗漏了什么或者做错了什么?为什么它仍然分配默认证书而不是我的自定义证书?
Traefik 默认证书被分配给我的 LCN 证书
下载声明:
本站所有软件和资料均为软件作者提供或网友推荐发布而来,仅供学习和研究使用,不得用于任何商业用途。如本站不慎侵犯你的版权请联系我,我将及时处理,并撤下相关内容!