Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Docker dynamic settings for TLS not docummented #6489

Closed
JonasJasas opened this issue Mar 15, 2020 · 1 comment
Closed

Docker dynamic settings for TLS not docummented #6489

JonasJasas opened this issue Mar 15, 2020 · 1 comment

Comments

@JonasJasas
Copy link

JonasJasas commented Mar 15, 2020

Do you want to request a feature or report a bug?

Both

What did you do?

labels:
  - "traefik.enable=true"
  - "traefik.docker.network=proxy"
  - "traefik.port=9292"
  - "traefik.tls.certificates.certFile=/etc/traefik/cert/${DOMAIN}.crt"
  - "traefik.tls.certificates.keyFile=/etc/traefik/cert/${DOMAIN}.key"
  - "traefik.tls.options.default.caFiles.clientAuthType=/etc/traefik/cert/cloudflare.crt"
  - "traefik.tls.options.default.clientAuth.clientAuthType=RequireAndVerifyClientCert"
  - "traefik.tls.options.default.minVersion=VersionTLS13"
  - "traefik.tls.options.default.sniStrict=true"

  - "traefik.http.routers.${COMPOSE_PROJECT_NAME}_app.rule=Host(`${SUB_DOMAIN}${DOMAIN}`)"
  - "traefik.http.routers.${COMPOSE_PROJECT_NAME}_app.tls=true"
  - "traefik.http.routers.${COMPOSE_PROJECT_NAME}_app.tls.options=default"

What did you expect to see?

Documentation how to set server and client certificates using Docker container labels.

What did you see instead?

Couldn't find documentation and unable to set server and client certificates.

Output of traefik version: (What version of Traefik are you using?)

2.1.6

@ldez
Copy link
Member

ldez commented Mar 15, 2020

Hello,

It's not documented because it's not available with labels.

Restriction

In the above example, we've used the file provider to handle these definitions. It is the only available method to configure the certificates (as well as the options and the stores). However, in Kubernetes, the certificates can and must be provided by secrets.

https://docs.traefik.io/v2.1/https/tls/

@ldez ldez closed this as completed Mar 15, 2020
@ldez ldez added kind/question a question and removed status/0-needs-triage labels Mar 15, 2020
@traefik traefik locked and limited conversation to collaborators Apr 28, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

3 participants