27 lines
1,012 B
Text
27 lines
1,012 B
Text
|
# Copy to traefik/dynamic/control-plane.yml with GATEWAY_CONTROL_PLANE_HOST
|
||
|
|
# substituted for a real hostname you control (e.g. gw.example.com, with its
|
||
|
|
# own A/AAAA record pointing at this VPS).
|
||
|
|
#
|
||
|
|
# Without this file, the control-plane API is only reachable at
|
||
|
|
# 127.0.0.1:8090 on the gateway host itself — fine for a local health
|
||
|
|
# check, useless for a real remote Furtka box, which needs this over HTTPS
|
||
|
|
# anyway: the registration response carries a WireGuard private key in
|
||
|
|
# plaintext JSON, so that call must never go out over bare HTTP.
|
||
|
|
#
|
||
|
|
# Keep the certResolver line below as-is — this stack always runs
|
||
|
|
# GATEWAY_MODE=single with HTTP-01, same as every app route (see
|
||
|
|
# traefik/static/traefik.single.yml).
|
||
|
|
http:
|
||
|
|
routers:
|
||
|
|
control-plane:
|
||
|
|
rule: "Host(`GATEWAY_CONTROL_PLANE_HOST`)"
|
||
|
|
entryPoints: [websecure]
|
||
|
|
service: control-plane
|
||
|
|
tls:
|
||
|
|
certResolver: le
|
||
|
|
services:
|
||
|
|
control-plane:
|
||
|
|
loadBalancer:
|
||
|
|
servers:
|
||
|
|
- url: "http://control-plane:8090"
|