From 10a83d39a21a0220321d9380a2574c0ce4abf33d Mon Sep 17 00:00:00 2001
From: "E.Gavrilov" <gavrilovdev@yandex-team.ru>
Date: Mon, 18 May 2026 01:34:11 +0300
Subject: [PATCH] add letsencrypt

---
 .gitea/workflows/deploy.yml | 2 ++
 README.md                   | 2 ++
 deploy/stack.example.yml    | 1 +
 3 files changed, 5 insertions(+)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 7b77cda..f984115 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -20,6 +20,7 @@ jobs:
       STACK_NAME: ${{ vars.STACK_NAME }}
       TRAEFIK_NETWORK: ${{ vars.TRAEFIK_NETWORK }}
       TRAEFIK_ENTRYPOINT: ${{ vars.TRAEFIK_ENTRYPOINT }}
+      TRAEFIK_CERTRESOLVER: ${{ vars.TRAEFIK_CERTRESOLVER }}
       SWARM_MANAGER_HOST: ${{ secrets.SWARM_MANAGER_HOST }}
       SWARM_SSH_USER: ${{ secrets.SWARM_SSH_USER }}
       SWARM_SSH_PORT: ${{ secrets.SWARM_SSH_PORT }}
@@ -52,6 +53,7 @@ jobs:
             echo "STACK_NAME=${STACK_NAME:-progcode}"
             echo "TRAEFIK_NETWORK=${TRAEFIK_NETWORK:-traefik-public}"
             echo "TRAEFIK_ENTRYPOINT=${TRAEFIK_ENTRYPOINT:-websecure}"
+            echo "TRAEFIK_CERTRESOLVER=${TRAEFIK_CERTRESOLVER:-le}"
             echo "SWARM_SSH_PORT=${SWARM_SSH_PORT:-22}"
           } >> "${GITHUB_ENV}"
 
diff --git a/README.md b/README.md
index f168ce1..08943fd 100644
--- a/README.md
+++ b/README.md
@@ -42,6 +42,7 @@ Gitea Actions variables:
 - `STACK_NAME` — optional, defaults to `progcode`.
 - `TRAEFIK_NETWORK` — optional, defaults to `traefik-public`.
 - `TRAEFIK_ENTRYPOINT` — optional, defaults to `websecure`.
+- `TRAEFIK_CERTRESOLVER` — optional, defaults to `le`.
 - The workflow also pushes `${IMAGE_REPO}:latest` automatically.
 
 Gitea Actions secrets:
@@ -63,6 +64,7 @@ DOMAIN=progcode.example.com
 STACK_NAME=progcode
 TRAEFIK_NETWORK=traefik-public
 TRAEFIK_ENTRYPOINT=websecure
+TRAEFIK_CERTRESOLVER=le
 ```
 
 Example account or organization secrets:
diff --git a/deploy/stack.example.yml b/deploy/stack.example.yml
index 54ead1b..993f503 100644
--- a/deploy/stack.example.yml
+++ b/deploy/stack.example.yml
@@ -11,6 +11,7 @@ services:
         - traefik.http.routers.progcode.rule=Host(`${DOMAIN}`)
         - traefik.http.routers.progcode.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}
         - traefik.http.routers.progcode.tls=true
+        - traefik.http.routers.progcode.tls.certresolver=${TRAEFIK_CERTRESOLVER:-le}
         - traefik.http.services.progcode.loadbalancer.server.port=8080
 
 networks: