Init Traefik certresolver for dns01 challenges

homelab/fighter/.gitignore

@@ -0,0 +1 @@
+secrets.env

homelab/fighter/config/traefik/docker-compose.yml

@@ -16,9 +16,17 @@ services:
       - ./traefik.yaml:/traefik.yaml
       - ./config:/config
       - $DOCKER_DATA/acme.json:/acme.json
+    secrets:
+      - cloudflare_token
+    environment:
+      - CF_DNS_API_TOKEN=/run/secrets/cloudflare_token
 
 networks:
   web:
     external: true
   monitoring:
     external: true
+
+secrets:
+  cloudflare_token:
+    file: ./cloudflare_secret.txt

homelab/fighter/config/traefik/traefik.yaml

@@ -18,6 +18,17 @@ certificatesResolvers:
       email: jafner425@gmail.com
       storage: acme.json
       tlsChallenge: {}
+  lets-encrypt-dns01:
+    acme:
+      email: jafner425@gmail.com
+      storage: acme.json
+      caserver: https://acme-staging-v02.api.letsencrypt.org/directory
+      dnsChallenge: 
+        provider: cloudflare
+        resolvers:
+          - "1.1.1.1:53"
+          - "8.8.8.8:53"
+        # CF_DNS_API_TOKEN 
 
 api: 
   insecure: true