initial commit

containers/traefik/docker-compose.yml

@@ -0,0 +1,40 @@
+services:
+  traefik:
+    image: traefik:v3.6
+    container_name: traefik
+    restart: unless-stopped
+    environment:
+      DOCKER_API_VERSION: "1.45"
+    command:
+      - --api.dashboard=true
+      - --providers.docker=true
+      - --providers.docker.exposedbydefault=false
+
+      - --entrypoints.web.address=:80
+      - --entrypoints.websecure.address=:443
+
+      - --entrypoints.web.http.redirections.entrypoint.to=websecure
+      - --entrypoints.web.http.redirections.entrypoint.scheme=https
+
+      - --providers.file.filename=/etc/traefik/dynamic.yml
+
+      # Exemple DNS challenge - provider à adapter
+      - --certificatesresolvers.letsencrypt.acme.dnschallenge=true
+      - --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=cloudflare
+
+      # utile pendant le debug
+      - --accesslog=true
+      - --log.level=INFO
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - /srv/certs:/certs:ro
+      - ./dynamic.yml:/etc/traefik/dynamic.yml:ro
+    networks:
+      - proxy
+
+networks:
+  proxy:
+    external: true

containers/traefik/dynamic.yml

@@ -0,0 +1,6 @@
+tls:
+  certificates:
+    - certFile: /certs/immich.schork.ch/fullchain.pem
+      keyFile: /certs/immich.schork.ch/privkey.pem
+    - certFile: /certs/navidrome.schork.ch/fullchain.pem
+      keyFile: /certs/navidrome.schork.ch/privkey.pem