traefik/docker-compose-global.yml aktualisiert

traefik/docker-compose-global.yml

@@ -10,7 +10,7 @@ services:
       - "--entrypoints.web.address=:80"
       - "--entrypoints.websecure.address=:443"
 
-      # Optional: Let's Encrypt
+      # Let's Encrypt (optional, aber hier aktiviert)
       - "--certificatesresolvers.le.acme.httpchallenge=true"
       - "--certificatesresolvers.le.acme.httpchallenge.entrypoint=web"
       - "--certificatesresolvers.le.acme.email=${TRAEFIK_ACME_EMAIL:-admin@example.com}"
@@ -18,6 +18,7 @@ services:
 
       # Dashboard
       - "--api.dashboard=true"
+      - "--api.insecure=false"
 
     ports:
       - "${TRAEFIK_HTTP_PORT:-80}:80"
@@ -25,8 +26,11 @@ services:
       - "${TRAEFIK_DASHBOARD_PORT:-8080}:8080"
 
     volumes:
+      # Docker Socket (Read-Only)
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
-      - "traefik_letsencrypt:/letsencrypt"
+
+      # Parametrisierter Speicherort für Let's Encrypt + Fallback
+      - "${TRAEFIK_DATA_PATH:-/opt/traefik}/letsencrypt:/letsencrypt"
 
     networks:
       - proxy
@@ -40,9 +44,6 @@ services:
       - "traefik.http.routers.traefik.entrypoints=websecure"
       - "traefik.http.routers.traefik.tls.certresolver=le"
 
-volumes:
-  traefik_letsencrypt:
-
 networks:
   proxy:
     name: proxy