From 38f2c58c5462478123f766d557c48ae517fa369b Mon Sep 17 00:00:00 2001
From: Richard Attermeyer <richard.attermeyer@gmail.com>
Date: Mon, 27 Nov 2023 11:08:14 +0000
Subject: [PATCH] WIP: removed api insecure

---
 infrastructure/.env                | 5 ++++-
 infrastructure/docker-compose.yml  | 5 ++---
 infrastructure/traefik/traefik.yml | 1 -
 3 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/infrastructure/.env b/infrastructure/.env
index afd88be..094eede 100644
--- a/infrastructure/.env
+++ b/infrastructure/.env
@@ -1,8 +1,11 @@
 # base domain
-BASE_DOMAIN=192-168-1-151.nip.io
+BASE_DOMAIN=rattermeyer.de
 
 # Traefik server host
 TRAEFIK_HOST=traefik.demo.${BASE_DOMAIN}
+TRAEFIK_LETSENCRYPT_CASERVER=https://acme-staging-v02.api.letsencrypt.org/directory
+TRAEFIK_LETSENCRYPT_EMAIL=richard.attermeyer@gmail.com
+
 
 MAIL_HOST=mail.demo.${BASE_DOMAIN}
 
diff --git a/infrastructure/docker-compose.yml b/infrastructure/docker-compose.yml
index 3d1870c..14ea5f5 100644
--- a/infrastructure/docker-compose.yml
+++ b/infrastructure/docker-compose.yml
@@ -23,7 +23,7 @@ volumes:
 
 services:
   traefik:
-    image: traefik:latest
+    image: traefik:v2.10.5
     container_name: traefik
     restart: always
     ports:
@@ -33,8 +33,6 @@ services:
       - "8543:443"
       # SSH port
       - "2222:222/tcp"
-      # The Web UI (enabled by '--api.dashboard=true' and '--api.insecure=true')
-      - "8181:8080"
     network_mode: host
     volumes:
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
@@ -46,6 +44,7 @@ services:
       - "traefik.http.routers.dashboard.rule=Host(`${TRAEFIK_HOST}`)"
       - "traefik.http.routers.dashboard.tls=true"
       - "traefik.http.routers.dashboard.entrypoints=https"
+      - "traefik.http.routers.dashboard.service=api@internal"
       - "traefik.http.services.dashboard.loadbalancer.server.port=8080"
 
   smtp:
diff --git a/infrastructure/traefik/traefik.yml b/infrastructure/traefik/traefik.yml
index f84ce97..63ea88e 100644
--- a/infrastructure/traefik/traefik.yml
+++ b/infrastructure/traefik/traefik.yml
@@ -4,7 +4,6 @@ global:
 
 api:
   dashboard: true
-  insecure: true
 
 log:
   level: INFO