Update Traefik configuration to support additional domains and optimize certificate resolvers

docker-compose.prod.yml

@@ -27,5 +27,5 @@ services:
 ##   docker compose up -d traefik caddy php1 php2 php3 php4 php5 db redis
 ##
 ## Notes:
-## - Traefik uses Let’s Encrypt production. Ensure DNS A/AAAA records for api.truckwash.dk and traefik.truckwash.dk point to this host and ports 80/443 are reachable.
+## - Traefik uses Let’s Encrypt production. Ensure DNS A/AAAA records for api.truckwash.dk, api.truckwash.io and traefik.truckwash.dk point to this host and ports 80/443 are reachable.
 ## - The dashboard is protected by basic auth and an IP allowlist (defined in dynamic.yml). Replace the bcrypt hash before enabling in production.

services/traefik/acme.json

@@ -0,0 +1 @@
+{}

services/traefik/dynamic.yml

@@ -34,7 +34,7 @@ http:
       service: noop@internal
       priority: 1000
       tls:
-        certResolver: le
+        certResolver: le_io
         domains:
           - main: api.truckwash.io
 

services/traefik/traefik.prod.yml

@@ -4,6 +4,18 @@ entryPoints:
   websecure:
     address: ":443"
 
+certificatesResolvers:
+  le:
+    acme:
+      email: jb@truckwash.dk
+      storage: /acme.json
+      tlsChallenge: {}
+  le_io:
+    acme:
+      email: jb@truckwash.dk
+      storage: /acme-io.json
+      tlsChallenge: {}
+
 providers:
   docker:
     exposedByDefault: false
@@ -18,15 +30,3 @@ log:
   level: WARN
 
 accessLog: {}
-
-certificatesResolvers:
-  le:
-    acme:
-      email: jb@truckwash.dk
-      storage: /acme.json
-      tlsChallenge: {}
-  le_io:
-    acme:
-      email: jb@truckwash.dk
-      storage: /acme-io.json
-      tlsChallenge: {}

services/traefik/traefik.yml

@@ -6,6 +6,18 @@ entryPoints:
   metrics:
     address: ":9100"
 
+certificatesResolvers:
+  le:
+    acme:
+      email: jb@truckwash.dk
+      storage: /acme.json
+      tlsChallenge: {}
+  le_io:
+    acme:
+      email: jb@truckwash.dk
+      storage: /acme-io.json
+      tlsChallenge: {}
+
 providers:
   docker:
     exposedByDefault: false
@@ -36,15 +48,3 @@ tracing:
     samplingParam: 1.0
     localAgentHostPort: jaeger:6831
     traceContextHeaderName: uber-trace-id
-
-certificatesResolvers:
-  le:
-    acme:
-      email: jb@truckwash.dk
-      storage: /acme.json
-      tlsChallenge: {}
-  le_io:
-    acme:
-      email: jb@truckwash.dk
-      storage: /acme-io.json
-      tlsChallenge: {}