Jon Chery
dccdb746ea
Dockerfile.traefik: extends traefik:v3.3.0 with baked default
static config (entrypoints 127.0.0.1:8080/8443/8081, file provider
watching /etc/traefik/dynamic, json log). Host-side traefik.yml
mounted :ro at runtime to override baked default (preserves
traefik-on-public-ip opt-out, REQ-100, C-58).
No certificatesResolvers — traefik v3.3 only supports acme/tailscale
(research finding). tls: {} in dynamic config for v0.14; real mTLS
deferred to v0.15 (grill G-003, confidence 0.55 < 0.60).
release.sh: second docker block builds+pushes orca-traefik image.
.coreci.yml: container-publish-traefik step mirrors container-publish.
Verified: docker build -f Dockerfile.traefik . succeeds; image starts
traefik v3.3.0 with --configFile=/etc/traefik/traefik.yml.
---ci---
project: orca
phase: 1
milestone: v0.14
status: execute
---/ci---
19 lines
269 B
YAML
19 lines
269 B
YAML
entryPoints:
|
|
websecure:
|
|
address: "127.0.0.1:8443"
|
|
web:
|
|
address: "127.0.0.1:8080"
|
|
traefik:
|
|
address: "127.0.0.1:8081"
|
|
|
|
providers:
|
|
file:
|
|
directory: "/etc/traefik/dynamic"
|
|
watch: true
|
|
|
|
log:
|
|
level: INFO
|
|
format: json
|
|
|
|
accessLog:
|
|
format: json |