first commit

2022-12-03 17:06:53 +00:00
commit 1f8106cb44
3 changed files with 331 additions and 0 deletions
@@ -0,0 +1,20 @@
+tls:
+  options:
+    default:
+      sniStrict: true
+      minVersion: VersionTLS12
+      cipherSuites:
+       - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+       - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+       - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+       - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+       - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+       - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
+    tlsv13only:
+      minVersion: VersionTLS13
+  stores:
+    default:
+      defaultGeneratedCert:
+        resolver: myresolver
+        domain:
+          main: onyx.nbit.ch
@@ -0,0 +1,64 @@
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  annotations:
+    bind-mount-options:/data/traefik/acme.json: z
+    bind-mount-options:/home/containers/onyx_pods/traefik/configuration: z
+    bind-mount-options:/run/user/1000/podman/podman.sock: z
+    io.kubernetes.cri-o.TTY/traefik: "false"
+    io.podman.annotations.autoremove/traefik: "FALSE"
+    io.podman.annotations.init/traefik: "FALSE"
+    io.podman.annotations.label/traefik: type:container_runtime_t
+    io.podman.annotations.privileged/traefik: "FALSE"
+    io.podman.annotations.publish-all/traefik: "FALSE"
+  creationTimestamp: "2022-12-03T15:45:41Z"
+  labels:
+    app: traefik-pod
+  name: traefik-pod
+spec:
+  hostNetwork: true
+  containers:
+  - args:
+    - --entrypoints.web.address=:80
+    - --entrypoints.web.http.redirections.entryPoint.to=websecure
+    - --entrypoints.web.http.redirections.entryPoint.scheme=https
+    - --entrypoints.websecure.address=:443
+    - --providers.docker=true
+    - --certificatesresolvers.myresolver.acme.email=postmaster@nbit.ch
+    - --certificatesresolvers.myresolver.acme.storage=/acme.json
+    - --certificatesresolvers.myresolver.acme.tlschallenge=true
+    - --certificatesresolvers.myresolver.acme.httpChallenge.entrypoint=web
+    - --providers.file.directory=/configuration/
+    - --providers.file.watch=true
+    - --accesslog=true
+    image: docker.io/library/traefik:latest
+    name: traefik
+    securityContext:
+      capabilities:
+        drop:
+        - CAP_MKNOD
+        - CAP_AUDIT_WRITE
+      seLinuxOptions:
+        type: container_runtime_t
+    volumeMounts:
+    - mountPath: /configuration/
+      name: home-containers-onyx_pods-traefik-configuration-host-0
+    - mountPath: /var/run/docker.sock
+      name: run-user-1000-podman-podman.sock-host-1
+    - mountPath: /acme.json
+      name: data-traefik-acme.json-host-2
+  volumes:
+  - hostPath:
+      path: /home/containers/onyx_pods/traefik/configuration
+      type: Directory
+    name: home-containers-onyx_pods-traefik-configuration-host-0
+  - hostPath:
+      path: /run/user/1000/podman/podman.sock
+      type: File
+    name: run-user-1000-podman-podman.sock-host-1
+  - hostPath:
+      path: /data/traefik/acme.json
+      type: File
+    name: data-traefik-acme.json-host-2
+