From 0b00ee06a4b37f153eccc5267ce94898fe056d07 Mon Sep 17 00:00:00 2001
From: Joerg Lehmann <joerg.lehmann@nbit.ch>
Date: Wed, 7 Dec 2022 16:18:59 +0000
Subject: [PATCH] tune config, improve doc

---
 README.md                            | 8 ++++++++
 traefik/configuration/tls-config.yml | 6 ------
 traefik/traefik.yaml                 | 5 +++++
 3 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 66af0df..1e233bb 100644
--- a/README.md
+++ b/README.md
@@ -62,6 +62,14 @@ command to check who is banned:
 # dnf install jq
 ```
 
+## Setup Mail
+
+```bash
+# dnf install s-nail procmail
+# cp /usr/share/doc/esmtp/sample.esmtprc /etc/esmtprc 
+# /usr/bin/esmtp-wrapper 
+```
+
 ## Backup Server
 
 TODO
diff --git a/traefik/configuration/tls-config.yml b/traefik/configuration/tls-config.yml
index aad2ff5..59d7580 100644
--- a/traefik/configuration/tls-config.yml
+++ b/traefik/configuration/tls-config.yml
@@ -12,9 +12,3 @@ tls:
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
     tlsv13only:
       minVersion: VersionTLS13
-  stores:
-    default:
-      defaultGeneratedCert:
-        resolver: myresolver
-        domain:
-          main: onyx.nbit.ch
diff --git a/traefik/traefik.yaml b/traefik/traefik.yaml
index 31f240d..5ce39cb 100644
--- a/traefik/traefik.yaml
+++ b/traefik/traefik.yaml
@@ -15,6 +15,8 @@ metadata:
   creationTimestamp: "2022-12-03T15:45:41Z"
   labels:
     app: traefik-pod
+    traefik.enable: true
+    traefik.http.routers.traefik.tls.domains[0].main: onyx.nbit.ch
   name: traefik-pod
 spec:
   containers:
@@ -24,6 +26,8 @@ spec:
     - --entrypoints.web.http.redirections.entryPoint.scheme=https
     - --entrypoints.websecure.address=:443
     - --providers.docker=true
+    - --providers.docker.exposedbydefault=false
+    - --providers.docker.network=web
     - --certificatesresolvers.myresolver.acme.email=postmaster@nbit.ch
     - --certificatesresolvers.myresolver.acme.storage=/acme.json
     - --certificatesresolvers.myresolver.acme.tlschallenge=true
@@ -31,6 +35,7 @@ spec:
     - --providers.file.directory=/configuration/
     - --providers.file.watch=true
     - --accesslog=true
+    #- --log.level=DEBUG
     #- --api.dashboard=true
     #- --api.insecure=true
     image: docker.io/library/traefik:latest