tune config, improve doc

README.md

@@ -62,6 +62,14 @@ command to check who is banned:
 # dnf install jq
 ```
 
+## Setup Mail
+
+```bash
+# dnf install s-nail procmail
+# cp /usr/share/doc/esmtp/sample.esmtprc /etc/esmtprc 
+# /usr/bin/esmtp-wrapper 
+```
+
 ## Backup Server
 
 TODO

traefik/configuration/tls-config.yml

@@ -12,9 +12,3 @@ tls:
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
     tlsv13only:
       minVersion: VersionTLS13
-  stores:
-    default:
-      defaultGeneratedCert:
-        resolver: myresolver
-        domain:
-          main: onyx.nbit.ch

traefik/traefik.yaml

@@ -15,6 +15,8 @@ metadata:
   creationTimestamp: "2022-12-03T15:45:41Z"
   labels:
     app: traefik-pod
+    traefik.enable: true
+    traefik.http.routers.traefik.tls.domains[0].main: onyx.nbit.ch
   name: traefik-pod
 spec:
   containers:
@@ -24,6 +26,8 @@ spec:
     - --entrypoints.web.http.redirections.entryPoint.scheme=https
     - --entrypoints.websecure.address=:443
     - --providers.docker=true
+    - --providers.docker.exposedbydefault=false
+    - --providers.docker.network=web
     - --certificatesresolvers.myresolver.acme.email=postmaster@nbit.ch
     - --certificatesresolvers.myresolver.acme.storage=/acme.json
     - --certificatesresolvers.myresolver.acme.tlschallenge=true
@@ -31,6 +35,7 @@ spec:
     - --providers.file.directory=/configuration/
     - --providers.file.watch=true
     - --accesslog=true
+    #- --log.level=DEBUG
     #- --api.dashboard=true
     #- --api.insecure=true
     image: docker.io/library/traefik:latest