fix: admin console via Traefik port 3002 without forced TLS
All checks were successful
CI / build (push) Successful in 47s
CI / docker (push) Successful in 9s

Remove tls=true from the logto-console router so the entrypoint
accepts plain HTTP. Logto's internal self-calls via ADMIN_ENDPOINT
use HTTP and pass through Traefik transparently. Browsers can
access via HTTP on port 3002.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
hsiegeln
2026-04-07 00:21:12 +02:00
parent 6497b59c55
commit fdca4911ae
3 changed files with 2 additions and 4 deletions

View File

@@ -8,7 +8,6 @@ services:
logto: logto:
ports: ports:
- "3001:3001" - "3001:3001"
- "3002:3002"
cameleer-saas: cameleer-saas:
ports: ports:

View File

@@ -30,7 +30,7 @@ services:
ports: ports:
- "80:80" - "80:80"
- "443:443" - "443:443"
- "3443:3443" - "3002:3002"
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
- ./traefik.yml:/etc/traefik/traefik.yml:ro - ./traefik.yml:/etc/traefik/traefik.yml:ro
@@ -84,7 +84,6 @@ services:
- traefik.http.services.logto.loadbalancer.server.port=3001 - traefik.http.services.logto.loadbalancer.server.port=3001
- traefik.http.routers.logto-console.rule=PathPrefix(`/`) - traefik.http.routers.logto-console.rule=PathPrefix(`/`)
- traefik.http.routers.logto-console.entrypoints=admin-console - traefik.http.routers.logto-console.entrypoints=admin-console
- traefik.http.routers.logto-console.tls=true
- traefik.http.routers.logto-console.service=logto-console - traefik.http.routers.logto-console.service=logto-console
- traefik.http.services.logto-console.loadbalancer.server.port=3002 - traefik.http.services.logto-console.loadbalancer.server.port=3002
networks: networks:

View File

@@ -12,7 +12,7 @@ entryPoints:
websecure: websecure:
address: ":443" address: ":443"
admin-console: admin-console:
address: ":3443" address: ":3002"
providers: providers:
docker: docker: