mirror of
				https://github.com/spantaleev/matrix-docker-ansible-deploy.git
				synced 2025-11-04 00:58:56 +01:00 
			
		
		
		
	Add doc for self-signed certificates
This commit is contained in:
		@@ -29,6 +29,45 @@ devture_traefik_config_entrypoint_web_secure_enabled: false
 | 
			
		||||
 | 
			
		||||
## Using self-signed SSL certificates
 | 
			
		||||
 | 
			
		||||
Using self-signed certificates with Traefik is a somewhat involved processes, where you need to manually mount the files into the container and adjust the "static" configuration to refer to them.
 | 
			
		||||
To use self-signed SSL certificates, you need to disable the certResolvers and the traefik-certs-dumper tool. 
 | 
			
		||||
You also need to override the providers.file setting in the Traefik configs. 
 | 
			
		||||
Create a file 'certificates.yml' in /devture-traefik/config/ with the following content:
 | 
			
		||||
 | 
			
		||||
Feel free to research this approach on your own and improve this guide!
 | 
			
		||||
```yaml
 | 
			
		||||
tls:
 | 
			
		||||
  certificates:
 | 
			
		||||
    - certFile: /ssl/cert.pem
 | 
			
		||||
      keyFile: /ssl/privkey.pem
 | 
			
		||||
  stores:
 | 
			
		||||
    default:
 | 
			
		||||
      defaultCertificate:
 | 
			
		||||
        certFile: /ssl/cert.pem
 | 
			
		||||
        keyFile: /ssl/privkey.pem
 | 
			
		||||
```
 | 
			
		||||
 | 
			
		||||
Place the key and your certificate in /devture-traefik/ssl/
 | 
			
		||||
You can use the matrix-aux role for this:
 | 
			
		||||
 | 
			
		||||
```yaml
 | 
			
		||||
matrix_aux_file_definitions:
 | 
			
		||||
 - dest: /devture-traefik/ssl/privkey.pem
 | 
			
		||||
   src: /path/to/privkey.pem
 | 
			
		||||
 - dest: /devture-traefik/ssl/cert.pem
 | 
			
		||||
   src: /path/to/cert.pem
 | 
			
		||||
 - dest: /devture-traefik/config/certificates.yml
 | 
			
		||||
   src: /path/to/certificates.yml
 | 
			
		||||
```
 | 
			
		||||
 | 
			
		||||
Then add the following to your vars.yml:
 | 
			
		||||
 | 
			
		||||
```yaml
 | 
			
		||||
devture_traefik_config_certificatesResolvers_acme_enabled: false
 | 
			
		||||
devture_traefik_certResolver_primary: ''
 | 
			
		||||
devture_traefik_ssl_dir_enabled: true
 | 
			
		||||
devture_traefik_configuration_extension_yaml: |
 | 
			
		||||
  providers:
 | 
			
		||||
    file:
 | 
			
		||||
      filename: /config/certificates.yml
 | 
			
		||||
      watch: true
 | 
			
		||||
matrix_playbook_traefik_certs_dumper_role_enabled: false
 | 
			
		||||
```
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user