push

portainer-traefik-agent.yml

@@ -5,7 +5,6 @@ services:
     image: "traefik:latest"
     command:
       - --entrypoints.web.address=:80
-      - --entryPoints.web.forwardedHeaders.insecure=true
       - --entrypoints.websecure.address=:443
       - --providers.docker=true
       - --providers.swarm=true
@@ -14,7 +13,7 @@ services:
       - --api=true
       - --api.dashboard=true 
       - --api.insecure=true
-      - --log.level=INFO
+      - --log.level=DEBUG
     deploy:
       mode: replicated
       replicas: 1
@@ -24,6 +23,10 @@ services:
       - "traefik.http.routers.dashboard.rule=Host(`traefik.test.com`)"
       - "traefik.http.routers.dashboard.service=api@internal"
       - "traefik.http.services.dashboard.loadbalancer.server.port=8080"
+      tls:
+        certificates:
+          - certFile: /certificates/jingoh.private.crt
+            keyFile: /certificates/jingoh.private.key
     ports:
       - target: 80
         published: 80
@@ -35,6 +38,7 @@ services:
       - public
     volumes:
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
+      - traefik-public-certificates:/certificates
 
   agent:
     image: portainer/agent:latest
@@ -56,7 +60,7 @@ services:
 
   portainer:
     image: portainer/portainer-ce:latest
-    command: -H tcp://tasks.agent:9001 --tlsskipverify
+    command: -H tcp://tasks.agent:9001 --tlsskipverify --http-enabled
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - data:/data
@@ -71,15 +75,31 @@ services:
         constraints: [node.role == manager]
       labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.portainer.rule=Host(`portainer.test.com`)"
-      - "traefik.http.routers.portainer.entrypoints=web"
+      - "traefik.http.routers.portainer.rule=Host(`portainer.jingoh.private.com`)"
+      - "traefik.http.routers.portainer.entrypoints=websecure"
       - "traefik.http.routers.portainer.service=portainer"
-      - "traefik.http.services.portainer.loadbalancer.server.port=9000"
+      - "traefik.http.services.portainer.loadbalancer.server.port=9443"
+      - "traefik.http.routers.portainer.tls=true"
       # Edge
-      - "traefik.http.routers.edge.rule=Host(`edge.test.com`)"
-      - "traefik.http.routers.edge.entrypoints=web"
+      - "traefik.http.routers.edge.rule=Host(`edge.private.com`)"
+      - "traefik.http.routers.edge.entrypoints=websecure"
       - "traefik.http.services.edge.loadbalancer.server.port=8000"
       - "traefik.http.routers.edge.service=edge"
+      - "traefik.http.routers.edge.tls=true"
+
+  whoami:
+    image: "traefik/whoami"
+    deploy:
+      labels:
+        - "traefik.enable=true"
+        - "traefik.http.routers.whoami.rule=Host(`whoamitest.jingoh.private`)"
+        - "traefik.http.routers.whoami.entrypoints=web"
+        - "traefik.http.services.whoami.loadbalancer.server.port=80"
+        - "traefik.http.routers.whoami-secured.rule=Host(`whoamitest.jingoh.private`)"
+        - "traefik.http.routers.whoami-secured.entrypoints=websecure"
+        - traefik.docker.network=public
+    networks:
+      - public
 
 networks:
   public:
@@ -88,4 +108,5 @@ networks:
     external: true
     attachable: true
 volumes:
-   data:
+   data:
+   traefik-public-certificates: