nbit-websites ready to run...

nbit-websites/docker-compose.yml

@@ -3,13 +3,25 @@ version: "3.5"
 services:
 
   simpleservice:
-    image: "traefik/whoami"
+    image: traefik/whoami
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.whoami2.rule=Host(`moby.nbit.ch`) && Path(`/whoami2`)"
       - "traefik.http.routers.whoami2.entrypoints=websecure"
       - "traefik.http.routers.whoami2.tls.certresolver=myresolver"
 
+  nbitwebsite:
+    image: "nginx:latest"
+    volumes:
+      - /home/joerg/nbit-website/document_root:/usr/share/nginx/html
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.nbitwebsite.rule=Host(`nbit.ch`,`www.nbit.ch`)"
+      - "traefik.http.routers.nbitwebsite.entrypoints=websecure"
+      - "traefik.http.routers.nbitwebsite.tls.certresolver=myresolver"
+      - "traefik.http.routers.nbitwebsite.tls.domains[0].main=nbit.ch"
+      - "traefik.http.routers.nbitwebsite.tls.domains[0].sans=www.nbit.ch"
+
 networks:
   default:
     external: true

proxy/configuration/tls-config.yml

@@ -0,0 +1,13 @@
+tls:
+  options:
+    default:
+      minVersion: VersionTLS12
+      cipherSuites:
+       - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+       - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+       - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+       - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+       - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+       - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
+    tlsv13only:
+      minVersion: VersionTLS13

proxy/docker-compose.yml

@@ -17,6 +17,8 @@ services:
       #- "--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
       - "--certificatesresolvers.myresolver.acme.email=postmaster@nbit.ch"
       - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
+      - "--providers.file.directory=/configuration/"
+      - "--providers.file.watch=true"
     ports:
       - "80:80"
       - "443:443"
@@ -24,14 +26,7 @@ services:
     volumes:
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
       - "data-volume:/letsencrypt"
-
-  simpleservice:
-    image: "traefik/whoami"
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.whoami.rule=Host(`moby.nbit.ch`) && Path(`/whoami`)"
-      - "traefik.http.routers.whoami.entrypoints=websecure"
-      - "traefik.http.routers.whoami.tls.certresolver=myresolver"
+      - "./configuration/:/configuration/"
 
 volumes:
   data-volume: