LE Certificates Resolver

traefik/docker-compose.yml

@@ -21,13 +21,15 @@ services:
         protocol: tcp
         mode: ingress
 
+    environment:
+      - CF_API_EMAIL=${TRAEFIK_CF_API_EMAIL}
+      - CF_API_KEY=${TRAEFIK_CF_API_KEY}
+
     volumes:
       # Mount the Docker socket for the Swarm provider
       # This MUST be run from a manager node to access the Swarm API via the socket.
       - /var/run/docker.sock:/var/run/docker.sock:ro   # Swarm API socket
-      - /mnt/docker-storage/traefik/certs:/certs:ro
-      - /mnt/docker-storage/traefik/dynamic:/dynamic:ro
-
+      - /mnt/docker-storage/traefik/acme:/acme
     # Traefik Static configuration via command-line arguments
     command:
       # HTTP EntryPoint
@@ -42,8 +44,10 @@ services:
       - "--entrypoints.websecure.address=:443"
       - "--entrypoints.websecure.http.tls=true"
 
-      # Attach dynamic TLS file
-      - "--providers.file.filename=/dynamic/tls.yaml"
+      # Certificates Resolver
+      - "--certificatesResolvers.letsencrypt.acme.email=${TRAEFIK_ACME_EMAIL}"
+      - "--certificatesResolvers.letsencrypt.acme.storage=/acme/acme.json"
+      - "--certificatesResolvers.letsencrypt.acme.dnsChallenge.provider=cloudflare"
 
       # Providers