add letsencrypt

.gitea/workflows/deploy.yml

@@ -20,6 +20,7 @@ jobs:
       STACK_NAME: ${{ vars.STACK_NAME }}
       TRAEFIK_NETWORK: ${{ vars.TRAEFIK_NETWORK }}
       TRAEFIK_ENTRYPOINT: ${{ vars.TRAEFIK_ENTRYPOINT }}
+      TRAEFIK_CERTRESOLVER: ${{ vars.TRAEFIK_CERTRESOLVER }}
       SWARM_MANAGER_HOST: ${{ secrets.SWARM_MANAGER_HOST }}
       SWARM_SSH_USER: ${{ secrets.SWARM_SSH_USER }}
       SWARM_SSH_PORT: ${{ secrets.SWARM_SSH_PORT }}
@@ -52,6 +53,7 @@ jobs:
             echo "STACK_NAME=${STACK_NAME:-progcode}"
             echo "TRAEFIK_NETWORK=${TRAEFIK_NETWORK:-traefik-public}"
             echo "TRAEFIK_ENTRYPOINT=${TRAEFIK_ENTRYPOINT:-websecure}"
+            echo "TRAEFIK_CERTRESOLVER=${TRAEFIK_CERTRESOLVER:-le}"
             echo "SWARM_SSH_PORT=${SWARM_SSH_PORT:-22}"
           } >> "${GITHUB_ENV}"
 

README.md

@@ -42,6 +42,7 @@ Gitea Actions variables:
 - `STACK_NAME` — optional, defaults to `progcode`.
 - `TRAEFIK_NETWORK` — optional, defaults to `traefik-public`.
 - `TRAEFIK_ENTRYPOINT` — optional, defaults to `websecure`.
+- `TRAEFIK_CERTRESOLVER` — optional, defaults to `le`.
 - The workflow also pushes `${IMAGE_REPO}:latest` automatically.
 
 Gitea Actions secrets:
@@ -63,6 +64,7 @@ DOMAIN=progcode.example.com
 STACK_NAME=progcode
 TRAEFIK_NETWORK=traefik-public
 TRAEFIK_ENTRYPOINT=websecure
+TRAEFIK_CERTRESOLVER=le
 ```
 
 Example account or organization secrets:

deploy/stack.example.yml

@@ -11,6 +11,7 @@ services:
         - traefik.http.routers.progcode.rule=Host(`${DOMAIN}`)
         - traefik.http.routers.progcode.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}
         - traefik.http.routers.progcode.tls=true
+        - traefik.http.routers.progcode.tls.certresolver=${TRAEFIK_CERTRESOLVER:-le}
         - traefik.http.services.progcode.loadbalancer.server.port=8080
 
 networks: