Traefik: do not use dynamic config using docker provider; user hostmode networking

traefik/configuration/nbitwebsite.yml

@@ -0,0 +1,19 @@
+http:
+  routers:
+    nbitwebsite:
+      entrypoints:
+      - websecure
+      tls:
+        certresolver: "myresolver"
+        domains:
+          - main: "www.linux-freelancer.ch"
+            sans: "linux-freelancer.ch"
+      rule: "Host(`linux-freelancer.ch`,`www.linux-freelancer.ch`)"
+      service: nbitwebsite
+
+  services:
+    nbitwebsite:
+      loadBalancer:
+        servers:
+        - url: http://127.0.0.1:9000/
+        passHostHeader: false

traefik/traefik.yaml

@@ -19,15 +19,13 @@ metadata:
     traefik.http.routers.traefik.tls.domains[0].main: onyx.nbit.ch
   name: traefik-pod
 spec:
+  hostNetwork: true
   containers:
   - args:
     - --entrypoints.web.address=:80
     - --entrypoints.web.http.redirections.entryPoint.to=websecure
     - --entrypoints.web.http.redirections.entryPoint.scheme=https
     - --entrypoints.websecure.address=:443
-    - --providers.docker=true
-    - --providers.docker.exposedbydefault=false
-    - --providers.docker.network=web
     - --certificatesresolvers.myresolver.acme.email=postmaster@nbit.ch
     - --certificatesresolvers.myresolver.acme.storage=/acme.json
     - --certificatesresolvers.myresolver.acme.tlschallenge=true
@@ -40,13 +38,6 @@ spec:
     #- --api.insecure=true
     image: docker.io/library/traefik:latest
     name: traefik
-    ports:
-    - containerPort: 80
-      hostPort: 80
-    - containerPort: 443
-      hostPort: 443
-    #- containerPort: 8080
-    #  hostPort: 8080
     securityContext:
       capabilities:
         drop:
@@ -74,4 +65,3 @@ spec:
       path: /data/traefik/acme.json
       type: File
     name: data-traefik-acme.json-host-2
-