traefik/docker-compose.yaml

@@ -8,12 +8,6 @@ networks:
     proxy:
         external: true
 
-secrets:
-    cloudflare_account_email_address:
-        file: /srv/secrets/traefik/email
-    cloudflare_dns_api_token:
-        file: /srv/secrets/traefik/token
-
 services:
     reverse-proxy:
         container_name: traefik
@@ -26,9 +20,6 @@ services:
             # Use the public network created to be shared between Traefik and
             # any other service that needs to be publicly available with HTTPS
             - proxy
-        secrets:
-            - cloudflare_account_email_address
-            - cloudflare_dns_api_token
         command:
             - --providers.docker # Enable Docker in Traefik, so that it reads labels from Docker services
             - --providers.docker.exposedbydefault=false # Do not expose all Docker services, only the ones explicitly exposed
@@ -40,6 +31,7 @@ services:
               # Set up LetsEncrypt
             - --certificatesresolvers.letsencrypt.acme.dnschallenge=true
             - --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=cloudflare
+            - --certificatesresolvers.letsencrypt.acme.email=${EMAIL_ADDRESS}
             - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
               # Set up an insecure listener that redirects all traffic to TLS
             - --entrypoints.web.address=:80
@@ -57,13 +49,12 @@ services:
             - /var/run/docker.sock:/var/run/docker.sock:ro # Add Docker as a mounted volume, so that Traefik can read the labels of other services
             - /srv/volumes/letsencrypt:/letsencrypt
         environment:
-            CLOUDFLARE_EMAIL_FILE: /run/secrets/cloudflare_account_email_address
-            CLOUDFLARE_DNS_API_TOKEN_FILE: /run/secrets/cloudflare_dns_api_token
-              # https://go-acme.github.io/lego/dns/cloudflare/
+            - CLOUDFLARE_EMAIL=${CLOUDFLARE_ACCOUNT_EMAIL_ADDRESS}
+            - CLOUDFLARE_DNS_API_TOKEN=${CLOUDFLARE_TOKEN_GOES_HERE}
         labels:
             - traefik.enable=true
-            - traefik.http.routers.dashboard.service=api@internal  # TODO: not working
-            - traefik.http.routers.dashboard.rule=Host(`traefik.golem.linux.it`)
+            - traefik.http.routers.dashboard.service=api@internal
+            - traefik.http.routers.dashboard.rule=Host(`traefik.889217.xyz`)
             - traefik.http.routers.dashboard.entrypoints=websecure
             - traefik.http.routers.dashboard.tls.certresolver=letsencrypt
         healthcheck:

watchtower/docker-compose.yaml

@@ -1,19 +0,0 @@
----
-version: '3.9'
-
-services:
-    watchtower:
-        image: containrrr/watchtower
-        restart: unless-stopped
-        volumes:
-            - /var/run/docker.sock:/var/run/docker.sock
-            - /etc/timezone:/etc/timezone:ro
-        env_file:
-            - /srv/secrets/watchtower/docker-compose.env # for: WATCHTOWER_NOTIFICATION_URL (format: "telegram://<API_KEY>@telegram?chats=<CHAT_ID>")
-            # chat id: https://api.telegram.org/botXXX:YYYYY/getUpdates (replace the XXX: YYYYY with your BOT HTTP API Token
-        environment:
-            WATCHTOWER_CLEANUP: 1
-            WATCHTOWER_INCLUDE_RESTARTING: 1
-            WATCHTOWER_NOTIFICATIONS: shoutrrr
-            WATCHTOWER_NOTIFICATIONS_HOSTNAME: golem.linux.it
-            # WATCHTOWER_NOTIFICATION_TEMPLATE: "{{range .}}{{.Time.Format \"2006-01-02 15:04:05\"}} ({{.Level}}): {{.Message}}{{println}}{{end}}"