vaultwarden,traefik: setup ssl

traefik/docker-compose/traefik/docker-compose.yaml

@@ -3,15 +3,17 @@ services:
     # The official v3 Traefik docker image
     image: traefik:v3.1
     # Enables the web UI and tells Traefik to listen to docker
-    command: --api.insecure=true --providers.docker
+    command: --api.insecure=true --providers.docker --configFile=/traefik/config.yml
     ports:
       # The HTTP port
       - "80:80"
       # The Web UI (enabled by --api.insecure=true)
       - "4113:8080"
+      - "433:433"
     volumes:
       # So that Traefik can listen to the Docker events
       - /var/run/docker.sock:/var/run/docker.sock
+      - ./services/traefik/config.yaml:/traefik/config.yaml
     networks:
       - traefik
 networks:

traefik/docker-compose/traefik/services/traefik/config.yaml

@@ -0,0 +1,3 @@
+tls:
+  stores:
+    default:

vaultwarden/docker-compose/vaultwarden/docker-compose.yaml

@@ -3,6 +3,8 @@ services:
     labels:
       - traefik.http.routers.vaultwarden.rule=Host(`vaultwarden.rschneider.net`)
       - traefik.http.services.vaultwarden.loadbalancer.server.port=80
+      - traefik.http.middlewares.test-redirectscheme.redirectscheme.scheme=https
+      - traefik.http.middlewares.test-redirectscheme.redirectscheme.permanent=true
     image: vaultwarden/server:latest
     container_name: vaultwarden
     restart: always