docker_mailserver_certbot_enabled

defaults/main.yml

@@ -57,3 +57,6 @@ docker_mailserver_relay_host: ""
 # Nécessite de fournir des variables supplémentaires :
 # - docker_mailserver_dovecot_oauth2_configuration
 docker_mailserver_configure_oauth: false
+
+# Active une configuration avec certbot pour que traefik récupère un certificat
+docker_mailserver_certbot_enabled: false

templates/docker-compose.yml

@@ -52,6 +52,29 @@ services:
     networks:
       - default
 
+{% if docker_mailserver_certbot_enabled %}
+  certificate:
+    image: nginx
+    environment:
+      - NGINX_HOST={{ docker_mailserver_fqdn }}
+      - NGINX_PORT=80
+    labels:
+      traefik.enable: true
+      traefik.docker.network: traefik
+      traefik.http.routers.certificate_{{ docker_mailserver_service_id }}.entrypoints: websecure
+      traefik.http.routers.certificate_{{ docker_mailserver_service_id }}.tls: true
+      traefik.http.routers.certificate_{{ docker_mailserver_service_id }}.tls.certresolver: letsencrypt
+      traefik.http.routers.certificate_{{ docker_mailserver_service_id }}.rule: "Host(`{{ docker_mailserver_fqdn }}`)"
+      traefik.http.services.certificate_{{ docker_mailserver_service_id }}.loadbalancer.server.port: 80
+    restart: always
+    networks:
+      - traefik
+
+{% endif %}
 networks:
   default:
     internal: false
+{% if docker_mailserver_certbot_enabled %}
+  traefik:
+    external: true
+{% endif %}