From ce5f2fef96c87d1b7cd9602d35a0b69b86200679 Mon Sep 17 00:00:00 2001
From: oxmox <oxmox@oxmox.dev>
Date: Sun, 3 Sep 2023 17:13:09 +0200
Subject: [PATCH] dashboard now at traefik/dashboard/ (it's slow)

---
 docker-compose.yml | 43 ++++++++++++++++++++++++++++++++-----------
 1 file changed, 32 insertions(+), 11 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 41f5077..4880343 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -7,32 +7,53 @@ services:
     container_name: "traefik"
     command:
       - "--log.level=DEBUG"
+      - "--accesslog=true"
+      - "--accesslog.filePath=/logs/access.log"
       - "--api.insecure=false"
+      - "--api.dashboard=true"
       - "--providers.docker=true"
       - "--providers.docker.exposedbydefault=false"
-      #- "--entrypoints.web.address=:80"
       - "--entrypoints.websecure.address=:443"
       - "--certificatesresolvers.myresolver.acme.tlschallenge=true"
       #- "--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
       - "--certificatesresolvers.myresolver.acme.email=badctoxymoron@gmx.de"
       - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
     ports:
-      #- "80:80"
       - "443:443"
-      - "8080:8080"
+      #- "8080:8080"
     volumes:
       - "./letsencrypt:/letsencrypt"
+      - "./traefik/logs:/logs"
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
-
-  whoami:
-    image: "traefik/whoami"
-    container_name: "simple-service"
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.whoami.rule=Host(`oxmox.root.sx`)"
-      #- "traefik.http.routers.whoami.entrypoints=web"
-      - "traefik.http.routers.whoami.entrypoints=websecure"
-      - "traefik.http.routers.whoami.tls.certresolver=myresolver"
+      # Make the traefik dashboard available under https://oxmox.root.sx/traefik/dashboard/
+      # For some reason it's slow when used this way. It's fast when exposed via port 8080 and api.insecure=true.
+      - "traefik.http.routers.traefik_api.rule=Host(`oxmox.root.sx`) && (PathPrefix(`/api`) || PathPrefix(`/traefik`))"
+      - "traefik.http.routers.traefik_api.entrypoints=websecure"
+      - "traefik.http.routers.traefik_api.tls.certresolver=myresolver"
+      - "traefik.http.routers.traefik_api.service=api@internal"
+      - "traefik.http.routers.traefik_api.middlewares=traefik_api_auth,traefik_api_strip"
+      - "traefik.http.middlewares.traefik_api_auth.basicauth.users=florian:$$apr1$$x/GrMMGU$$Dn7yVliaRFEwlW17SNh6s."
+      - "traefik.http.middlewares.traefik_api_strip.stripprefix.prefixes=/traefik/"
+
+  #whoami:
+  #  image: "traefik/whoami"
+  #  container_name: "simple-service"
+  #  labels:
+  #    - "traefik.enable=true"
+  #    - "traefik.http.routers.whoami.rule=Host(`oxmox.root.sx`) && Path(`/whoami`)"
+  #    - "traefik.http.routers.whoami.entrypoints=websecure"
+  #    - "traefik.http.routers.whoami.tls.certresolver=myresolver"
+
+  #dashboard:
+  #  image: "traefik/whoami"
+  #  container_name: "dashboard-service"
+  #  labels:
+  #    - "traefik.enable=true"
+  #    - "traefik.http.routers.dashboard.rule=Host(`oxmox.root.sx`) && PathPrefix(`/dashboard`)"
+  #    - "traefik.http.routers.dashboard.entrypoints=websecure"
+  #    - "traefik.http.routers.dashboard.tls.certresolver=myresolver"
 
   #wireguard:
   #  image: lscr.io/linuxserver/wireguard:latest