Fix traefik post, drone: build on every push
continuous-integration/drone/push Build is passing Details

master
René Jochum 2 years ago
parent a637aefcd1
commit a1a28daf7f
Signed by: jochum
GPG Key ID: F7D906F5E51E8E5E

@ -12,6 +12,7 @@ trigger:
- cron - cron
- custom - custom
- tag - tag
- push
steps: steps:
- name: build - name: build

@ -58,12 +58,23 @@ For me that wasn't a 5 minutes job as I had to replace [ingress-nginx](https://g
ports: ports:
web: web:
hostPort: 80 hostPort: 80
http:
redirections:
entryPoint:
to: websecure
scheme: https
websecure: websecure:
hostPort: 443 hostPort: 443
http3: http3:
advertisedPort: 443 advertisedPort: 443
tls: tls:
enabled: true enabled: true
websecure-udp:
port: 9443
expose: true
exposedPort: 443
protocol: UDP
podAnnotations: podAnnotations:
prometheus.io/port: "8082" prometheus.io/port: "8082"
prometheus.io/scrape: "true" prometheus.io/scrape: "true"
@ -81,20 +92,16 @@ For me that wasn't a 5 minutes job as I had to replace [ingress-nginx](https://g
- key: "node-role.kubernetes.io/master" - key: "node-role.kubernetes.io/master"
operator: "Exists" operator: "Exists"
effect: "NoSchedule" effect: "NoSchedule"
service:
type: NodePort
ipFamilyPolicy: "PreferDualStack"
experimental: experimental:
http3: http3:
enabled: true enabled: true
additionalArguments: additionalArguments:
- "--accesslog"
- "--providers.kubernetesingress.allowexternalnameservices" - "--providers.kubernetesingress.allowexternalnameservices"
- "--providers.kubernetescrd.allowexternalnameservices" - "--providers.kubernetescrd.allowexternalnameservices"
- "--entrypoints.websecure.http3.advertisedport=443" - "--entrypoints.websecure.http3.advertisedport=443"
- "--certificatesresolvers.letsencrypt-prod.acme.tlschallenge" - "--certificatesresolvers.letsencrypt-prod.acme.tlschallenge"
- "--certificatesresolvers.letsencrypt-prod.acme.email=support@example.com" - "--certificatesresolvers.letsencrypt-prod.acme.email=support@jochum.dev"
- "--certificatesresolvers.letsencrypt-prod.acme.storage=/data/acme.json" - "--certificatesresolvers.letsencrypt-prod.acme.storage=/data/acme.json"
- "--certificatesresolvers.letsencrypt-prod.acme.caserver=https://acme-v02.api.letsencrypt.org/directory" - "--certificatesresolvers.letsencrypt-prod.acme.caserver=https://acme-v02.api.letsencrypt.org/directory"
image: image:
@ -111,6 +118,23 @@ For me that wasn't a 5 minutes job as I had to replace [ingress-nginx](https://g
ssl: ssl:
enabled: true enabled: true
permanentRedirect: true permanentRedirect: true
logs:
# general:
# format: json
access:
enabled: true
# format: json
fields:
headers:
defaultmode: drop
names:
User-Agent: keep
Content-Type: keep
RequestLine: keep
persistence:
enabled: true
``` ```
- Change the acme email address there - Change the acme email address there

Loading…
Cancel
Save