From 4091c9a8f0904829eebea2eb67e23420844ce2c2 Mon Sep 17 00:00:00 2001
From: HugoPoi <hugo@poissonnet.fr>
Date: Thu, 13 Jan 2022 13:45:14 +0100
Subject: [PATCH] first working version

---
 .gitignore             |  1 +
 README.md              |  6 +++++
 demo/index.php         |  3 +++
 docker-compose.yml     | 50 ++++++++++++++++++++++++++++++++++++++++++
 fake-seafile/index.php |  3 +++
 gen-certs.sh           | 10 +++++++++
 traefik/config.yml     | 16 ++++++++++++++
 traefik/traefik.yml    | 27 +++++++++++++++++++++++
 8 files changed, 116 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 README.md
 create mode 100644 demo/index.php
 create mode 100644 docker-compose.yml
 create mode 100644 fake-seafile/index.php
 create mode 100755 gen-certs.sh
 create mode 100644 traefik/config.yml
 create mode 100644 traefik/traefik.yml

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..b229014
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+certs
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..bf7f316
--- /dev/null
+++ b/README.md
@@ -0,0 +1,6 @@
+# Some config examples for learning Traefik
+
+## Seafile behind Traefik with HTTPS
+* Handle HTTP to HTTPS redirection
+* Handle /seafhttp path to 8082
+
diff --git a/demo/index.php b/demo/index.php
new file mode 100644
index 0000000..e6d172b
--- /dev/null
+++ b/demo/index.php
@@ -0,0 +1,3 @@
+demo
+<?php
+var_dump($_SERVER);
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..603652a
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,50 @@
+version: '3'
+
+services:
+  reverse-proxy:
+    # The official v2 Traefik docker image
+    image: traefik:v2.5
+    # Enables the web UI and tells Traefik to listen to docker
+    command: --api.insecure=true
+    ports:
+      # The HTTP port
+      - "80:80"
+      - "443:443"
+      # The Web UI (enabled by --api.insecure=true)
+      - "8080:8080"
+    volumes:
+      # So that Traefik can listen to the Docker events
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./traefik:/etc/traefik:ro
+      - ./certs:/certs:ro
+  fake-seafile:
+    image: php:apache-buster
+    volumes:
+      - ./fake-seafile:/var/www/html:ro
+    labels:
+      - traefik.http.routers.seafile.entrypoints=websecure
+      - traefik.http.routers.seafile.rule=Host(`seafile.local`)
+      - traefik.http.routers.seafile.tls=true
+      - traefik.http.services.seafile.loadbalancer.server.port=80
+      - traefik.http.routers.seafile.service=seafile
+#      - traefik.http.routers.seafile.tls.certresolver=letsencrypt
+
+      - traefik.http.routers.seafile-http.entrypoints=web
+      - traefik.http.routers.seafile-http.rule=Host(`seafile.local`)
+      - traefik.http.routers.seafile-http.middlewares=mid-to-https
+      - traefik.http.middlewares.mid-to-https.redirectscheme.scheme=https
+      - traefik.http.routers.seafile-http.service=seafile
+
+      - traefik.http.routers.seafhttp.entrypoints=websecure
+      - traefik.http.routers.seafhttp.rule=Host(`seafile.local`) && PathPrefix(`/seafhttp`)
+      - traefik.http.routers.seafhttp.tls=true
+      - traefik.http.services.seafhttp.loadbalancer.server.port=8082
+      - traefik.http.routers.seafhttp.service=seafhttp
+      - traefik.http.routers.seafhttp.middlewares=sf-strippath
+      - traefik.http.middlewares.sf-strippath.stripprefix.prefixes=/seafhttp
+  demo:
+    image: php:apache-buster
+    volumes:
+      - ./demo:/var/www/html:ro
+    ports:
+      - "8081:80"
diff --git a/fake-seafile/index.php b/fake-seafile/index.php
new file mode 100644
index 0000000..3f3fb1d
--- /dev/null
+++ b/fake-seafile/index.php
@@ -0,0 +1,3 @@
+Fake Seafile
+<?php
+var_dump($_SERVER);
diff --git a/gen-certs.sh b/gen-certs.sh
new file mode 100755
index 0000000..c8ea1a2
--- /dev/null
+++ b/gen-certs.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+MKCERT_VERSION=1.4.3
+CERT_HOSTNAMES="seafile.local"
+
+mkdir -p certs
+cd certs
+wget --no-clobber "https://github.com/FiloSottile/mkcert/releases/download/v$MKCERT_VERSION/mkcert-v$MKCERT_VERSION-linux-amd64"
+chmod +x "mkcert-v$MKCERT_VERSION-linux-amd64"
+./mkcert-v$MKCERT_VERSION-linux-amd64 -install $CERT_HOSTNAMES
+echo "You need to add $CERT_HOSTNAMES in your /etc/hosts"
diff --git a/traefik/config.yml b/traefik/config.yml
new file mode 100644
index 0000000..6b792fb
--- /dev/null
+++ b/traefik/config.yml
@@ -0,0 +1,16 @@
+tls:
+  certificates:
+    - certFile: /certs/seafile.local.pem
+      keyFile: /certs/seafile.local-key.pem
+
+http:
+  services:
+    demo:
+      loadBalancer:
+        servers:
+          - url: "http://demo/"
+  routers:
+    demo:
+      rule: "Host(`demo.local`)"
+      service: demo
+      tls: true
diff --git a/traefik/traefik.yml b/traefik/traefik.yml
new file mode 100644
index 0000000..f4a9c27
--- /dev/null
+++ b/traefik/traefik.yml
@@ -0,0 +1,27 @@
+api:
+  insecure: true
+providers:
+  docker: {}
+entryPoints:
+  web:
+    address: ":80"
+    forwardedHeaders:
+      insecure: true
+  websecure:
+    address: ":443"
+    forwardedHeaders:
+      insecure: true
+
+providers:
+  file:
+    filename: "/etc/traefik/config.yml"
+  docker: {}
+
+certificatesResolvers:
+  letsencrypt:
+    acme:
+      email: gabi@youpi.local
+      storage: acme.json
+      httpChallenge:
+        # used during the challenge
+        entryPoint: web