68 lines
		
	
	
		
			2.3 KiB
		
	
	
	
		
			YAML
		
	
	
	
			
		
		
	
	
			68 lines
		
	
	
		
			2.3 KiB
		
	
	
	
		
			YAML
		
	
	
	
| ---
 | |
| apiVersion: v1
 | |
| kind: Pod
 | |
| metadata:
 | |
|   annotations:
 | |
|     bind-mount-options:/data/traefik/acme.json: z
 | |
|     bind-mount-options:/home/containers/onyx_pods/traefik/configuration: z
 | |
|     bind-mount-options:/run/user/1000/podman/podman.sock: z
 | |
|     io.kubernetes.cri-o.TTY/traefik: "false"
 | |
|     io.podman.annotations.autoremove/traefik: "FALSE"
 | |
|     io.podman.annotations.init/traefik: "FALSE"
 | |
|     io.podman.annotations.label/traefik: type:container_runtime_t
 | |
|     io.podman.annotations.privileged/traefik: "FALSE"
 | |
|     io.podman.annotations.publish-all/traefik: "FALSE"
 | |
|   creationTimestamp: "2022-12-03T15:45:41Z"
 | |
|   labels:
 | |
|     app: traefik-pod
 | |
|     traefik.enable: true
 | |
|     traefik.http.routers.traefik.tls.domains[0].main: onyx.nbit.ch
 | |
|   name: traefik-pod
 | |
| spec:
 | |
|   hostNetwork: true
 | |
|   containers:
 | |
|   - args:
 | |
|     - --entrypoints.web.address=:80
 | |
|     - --entrypoints.web.http.redirections.entryPoint.to=websecure
 | |
|     - --entrypoints.web.http.redirections.entryPoint.scheme=https
 | |
|     - --entrypoints.websecure.address=:443
 | |
|     - --certificatesresolvers.myresolver.acme.email=postmaster@nbit.ch
 | |
|     - --certificatesresolvers.myresolver.acme.storage=/acme.json
 | |
|     - --certificatesresolvers.myresolver.acme.tlschallenge=true
 | |
|     - --certificatesresolvers.myresolver.acme.httpChallenge.entrypoint=web
 | |
|     - --providers.file.directory=/configuration/
 | |
|     - --providers.file.watch=true
 | |
|     - --accesslog=true
 | |
|     #- --log.level=DEBUG
 | |
|     #- --api.dashboard=true
 | |
|     #- --api.insecure=true
 | |
|     image: docker.io/library/traefik:latest
 | |
|     name: traefik
 | |
|     securityContext:
 | |
|       capabilities:
 | |
|         drop:
 | |
|         - CAP_MKNOD
 | |
|         - CAP_AUDIT_WRITE
 | |
|       seLinuxOptions:
 | |
|         type: container_runtime_t
 | |
|     volumeMounts:
 | |
|     - mountPath: /configuration/
 | |
|       name: home-containers-onyx_pods-traefik-configuration-host-0
 | |
|     - mountPath: /var/run/docker.sock
 | |
|       name: run-user-1000-podman-podman.sock-host-1
 | |
|     - mountPath: /acme.json
 | |
|       name: data-traefik-acme.json-host-2
 | |
|   volumes:
 | |
|   - hostPath:
 | |
|       path: /home/containers/onyx_pods/traefik/configuration
 | |
|       type: Directory
 | |
|     name: home-containers-onyx_pods-traefik-configuration-host-0
 | |
|   - hostPath:
 | |
|       path: /run/user/1000/podman/podman.sock
 | |
|       type: File
 | |
|     name: run-user-1000-podman-podman.sock-host-1
 | |
|   - hostPath:
 | |
|       path: /data/traefik/acme.json
 | |
|       type: File
 | |
|     name: data-traefik-acme.json-host-2
 |