Traefik和通配符证书由第三方颁发

时间:2019-04-26 16:35:38

标签: traefik

我已设置并运行traefik,但是遇到https(通配符证书)问题。我能够从80重定向到443,但不会加载任何内容。我在日志中看不到太多信息,它们已设置为调试级别

检查了证书的权限,并将日志设置为调试 crt上为0644,键上为0600

Tarefik TOML

defaultEntryPoints = ["http", "https"]

[entryPoints]
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
    entryPoint = "https"
  [entryPoints.https]
  address = ":443"
    [entryPoints.https.tls]
      [[entryPoints.https.tls.certificates]]
      certFile = "/etc/traefik/certs/server.crt"
      keyFile = "/etc/traefik/certs/server.key"

Docker Compose

services:
  reverse-proxy:
    image: traefik # The official Traefik docker image
    command: --api --docker # Enables the web UI and tells Traefik to listen to docker
    ports:
      - "80:80"     # The HTTP port
      - "8080:8080" # The Web UI (enabled by --api)
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock # So that Traefik can listen to the Docker events
      - /home/traefik/traefik.toml:/traefik.toml
      - /home/traefik/certs:/etc/traefik/certs
    networks:
      - traefik-net  

正在运行的NGINX服务器示例

 nginx-docker:
    image: nginx:latest
    labels:
      - "traefik.frontend.rule=Host:<hostname>.eogresources.com"
    networks:
      - traefik-net

1 个答案:

答案 0 :(得分:0)

在traefik上曝光443可解决我的问题。添加了其他端口docker-compose文件,更改反映如下。愚蠢的错误。还在撰写文件中添加了网络,以实现更多自动化

services:
  reverse-proxy:
    image: traefik # The official Traefik docker image
    command: --api --docker # Enables the web UI and tells Traefik to listen to docker
    ports:
      - "80:80"     # The HTTP port
      - "8080:8080" # The Web UI (enabled by --api)
      - "443:443"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock # So that Traefik can listen to the Docker events
      - /home/traefik/traefik.toml:/traefik.toml
      - /home/traefik/certs:/etc/traefik/certs
    networks:
      - traefik-net  

networks:
  traefik-net:
    driver: "overlay"