traefik certresolver

[straight-into-the-wall]

Hi,
I would like to use static-web-server with docker-compose, traefik and its certresolver, something like this:

...
  blogstatic:
    image: joseluisq/static-web-server:2
    container_name: "blogstatic"
    restart: always
    environment:
      - SERVER_PORT=8787
      - SERVER_ROOT=/public
      - SERVER_DIRECTORY_LISTING=true
      - SERVER_HTTP2_TLS=true
    ports:
      - "8787:443"
    volumes:
      - ./blog:/public
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.blogstatic.rule=Host(`mysite.com`)"
      - "traefik.http.routers.blogstatic.entrypoints=websecure"
      - "traefik.http.routers.blogstatic.tls.certresolver=mysiteschallenge"

Is it possible?

[joseluisq]

Hi,
Here some minor things that you have to do:

If you want to use HTTP/2 + TLS from the container.

• The SERVER_PORT should be adjusted to 443 to match the internal container port in your case.
• Also along with SERVER_HTTP2_TLS=true, you have to see how to specify the TLS cert and key via SERVER_HTTP2_TLS_CERT and SERVER_HTTP2_TLS_KEY envs. See https://sws.joseluisq.net/examples/http2-tls/

Otherwise if you just want to proxy the HTTP/1 server and let Traefik to manage TLS for you

• Leave SERVER_PORT=8787 (or even use the default 80 port and remove this optional env)
• Tell Traefik about the the server port. Probably via "traefik.http.services.blogstatic.loadbalancer.server.port=8787" on Docker labels. See https://doc.traefik.io/traefik/v2.5/providers/docker/#usebindportip

Tips:

• SERVER_ROOT=/public is optional so you don't have to specify it if you want to use the default public dir.

BTW I now that the Traefik example in the SWS docs is for Traefik v1.x but I will try to update it as soon as I can.
Also there are other examples if you want help with features. See https://sws.joseluisq.net

[joseluisq]

There is now a simple example using the latest Traefik 3. See https://static-web-server.net/features/docker/#docker-compose