Logo
Explore Help
Register Sign In
cameleer/cameleer-saas
2
0
Fork 0
You've already forked cameleer-saas
Code Issues 22 Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ec38d0b1c22f77b8b41cf24bd66ea55d8fe5f9c9
cameleer-saas/docker/traefik-dynamic.yml

25 lines
510 B
YAML
Raw Normal View History

fix: root → /platform/ redirect via Traefik file config Docker-compose label escaping mangles regex patterns. Use a separate Traefik dynamic config file instead — clean regex, proper 302 redirect. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-05 23:30:38 +02:00
http:
routers:
root-redirect:
rule: "Path(`/`)"
priority: 100
entryPoints:
- websecure
tls: {}
middlewares:
- root-to-platform
service: saas@docker
middlewares:
root-to-platform:
redirectRegex:
regex: "^(https?://[^/]+)/?$"
replacement: "${1}/platform/"
permanent: false
fix: move TLS default cert config to Traefik dynamic config Traefik v3 ignores tls.stores.default in the static config, causing it to serve its auto-generated fallback cert instead of the platform cert. Moving the default certificate store to the dynamic config (file provider) fixes this — Traefik now serves the correct cert and also picks up cert rotations without a restart. This was the root cause of OIDC PKIX failures: the server imported the CA into its JVM truststore, but Traefik was serving a different cert entirely. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-11 11:45:02 +02:00
tls:
stores:
default:
defaultCertificate:
certFile: /etc/traefik/certs/cert.pem
keyFile: /etc/traefik/certs/key.pem
Reference in New Issue Copy Permalink
Powered by Gitea Version: 1.25.2 Page: 42ms Template: 3ms
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API