Initial commit: homelab configuration and documentation

services/swarm/traefik/traefik.yml

@@ -0,0 +1,54 @@
+# traefik.yml - static configuration (file provider)
+checkNewVersion: true
+sendAnonymousUsage: false
+
+log:
+  level: INFO
+
+api:
+  dashboard: true
+  insecure: false   # set to true only for quick local testing (not recommended for public)
+
+# single entryPoints section (merged)
+entryPoints:
+  web:
+    address: ":80"
+    http:
+      redirections:
+        entryPoint:
+          to: websecure
+          scheme: https
+    # optional timeouts can live under transport as well (kept only on websecure below)
+
+  websecure:
+    address: ":443"
+    http:
+      tls:
+        certResolver: leresolver
+    transport:
+      respondingTimeouts:
+        # keep these large if you expect long uploads/downloads or long-lived requests
+        readTimeout: 600s
+        writeTimeout: 600s
+        idleTimeout: 600s
+
+providers:
+  swarm:
+    endpoint: "unix:///var/run/docker.sock"
+
+certificatesResolvers:
+  leresolver:
+    acme:
+      email: "sterlenjohnson6@gmail.com"
+      storage: "/letsencrypt/acme.json"
+      # DNS-01, using DuckDNS provider
+      dnsChallenge:
+        provider: duckdns
+        delayBeforeCheck: 60s
+        # Usually unnecessary to specify "resolvers" unless you have special internal resolvers.
+        # If you DO need Traefik to use specific DNS servers for the challenge, make sure
+        # the container has network access to them and that they will answer public DNS queries.
+        resolvers:
+         - "192.168.1.196:53"
+         - "192.168.1.245:53"
+         - "192.168.1.62:53"