From e7e187da7c02e256cda7a1a025b2bcb12ed16eb3 Mon Sep 17 00:00:00 2001
From: Dennis Postma <dennis@directonline.io>
Date: Sat, 8 Feb 2025 23:50:43 +0100
Subject: [PATCH] Attempt 9999

---
 certificates/acme.json |  0
 docker-compose.yml     | 20 ++++++++++++++++++++
 traefik.yml            | 33 +++++++++++++++++++++++++++++++++
 3 files changed, 53 insertions(+)
 create mode 100644 certificates/acme.json
 create mode 100644 traefik.yml

diff --git a/certificates/acme.json b/certificates/acme.json
new file mode 100644
index 0000000..e69de29
diff --git a/docker-compose.yml b/docker-compose.yml
index 1c9c75c..a806e9a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -34,6 +34,13 @@ services:
     restart: unless-stopped
     networks:
       - app-network
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.app.rule=Host(`${HOST}`)"
+      - "traefik.http.routers.app.entrypoints=websecure"
+      - "traefik.http.routers.app.tls=true"
+      - "traefik.http.routers.app.service=app"
+      - "traefik.http.services.app.loadbalancer.server.port=${PORT}"
 
   mariadb:
     image: mariadb:lts
@@ -62,6 +69,19 @@ services:
     networks:
       - app-network
 
+  traefik:
+    image: traefik:v3.3.3
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ./traefik.yml:/etc/traefik/traefik.yml:ro
+      - ./certificates:/certificates
+    networks:
+      - app-network
+    restart: unless-stopped
+
 networks:
   app-network:
     driver: bridge
diff --git a/traefik.yml b/traefik.yml
new file mode 100644
index 0000000..8c75c25
--- /dev/null
+++ b/traefik.yml
@@ -0,0 +1,33 @@
+entryPoints:
+  web:
+    address: ":80"
+    http:
+      redirections:
+        entryPoint:
+          to: websecure
+          scheme: https
+  websecure:
+    address: ":443"
+    http:
+      tls:
+        certResolver: letsencrypt
+
+certificatesResolvers:
+  letsencrypt:
+    acme:
+      email: info@noxious.gg
+      storage: /certificates/acme.json
+      httpChallenge:
+        entryPoint: web
+
+providers:
+  docker:
+    endpoint: "unix:///var/run/docker.sock"
+    exposedByDefault: false
+    network: app-network
+
+log:
+  level: INFO
+
+api:
+  dashboard: false
\ No newline at end of file