by default disable traefik service for docker container

roles/blog/templates/docker-compose.yml.j2

@@ -12,6 +12,7 @@ services:
     networks:
       - traefik
     labels:
+      - traefik.enable=true
       - traefik.http.routers.blog.entrypoints=websecure
       - traefik.http.routers.blog.rule=Host(`pizzapim.nl`)
       - traefik.http.routers.blog.tls=true

roles/forgejo/templates/docker-compose.yml.j2

@@ -20,6 +20,7 @@ services:
       - /etc/timezone:/etc/timezone:ro
       - /etc/localtime:/etc/localtime:ro
     labels:
+      - traefik.enable=true
       - traefik.http.routers.forgejo.entrypoints=websecure
       - traefik.http.routers.forgejo.rule=Host(`git.pizzapim.nl`)
       - traefik.http.routers.forgejo.tls=true

roles/freshrss/templates/docker-compose.yml.j2

@@ -24,11 +24,12 @@ services:
       ADMIN_API_PASSWORD: {{ admin_password }}
       PUBLISHED_PORT: 443
     labels:
+      - traefik.enable=true
       - traefik.http.routers.freshrss.entrypoints=websecure
       - traefik.http.routers.freshrss.rule=Host(`rss.pizzapim.nl`)
       - traefik.http.routers.freshrss.tls=true
       - traefik.http.routers.freshrss.tls.certresolver=pizzapim
-      - traefik.tcp.routers.freshrss.service=freshrss
+      - traefik.http.routers.freshrss.service=freshrss
 
 networks:
   traefik:

roles/jitsi/templates/docker-compose.yml.j2

@@ -21,6 +21,7 @@ services:
             - meet.jitsi
             - traefik
         labels:
+            - traefik.enable=true
             - traefik.http.routers.jitsi-web.entrypoints=websecure
             - traefik.http.routers.jitsi-web.rule=Host(`{{ public_domain }}`)
             - traefik.http.routers.jitsi-web.tls=true
@@ -96,6 +97,7 @@ services:
         networks:
             meet.jitsi:
         labels:
+            - traefik.enable=true
             - traefik.udp.routers.jitsi-videobridge.rule=HostSNI(`*`)
             - traefik.udp.routers.jitsi-videobridge.entrypoints=video
             - traefik.udp.routers.jitsi-videobridge.service=jitsi-videobridge

roles/mastodon/templates/docker-compose.yml.j2

@@ -49,6 +49,7 @@ services:
       - {{ data_dir }}/public/system:/mastodon/public/system
       - {{ service_dir }}/cache:/mastodon/public/system/cache
     labels:
+      - traefik.enable=true
       - traefik.http.routers.mastodon.entrypoints=websecure
       - traefik.http.routers.mastodon.rule=Host(`social.pizzapim.nl`)
       - traefik.http.routers.mastodon.tls=true
@@ -73,6 +74,7 @@ services:
       - db
       - redis
     labels:
+      - traefik.enable=true
       - traefik.http.routers.mastodon-streaming.entrypoints=websecure
       - "traefik.http.routers.mastodon-streaming.rule=(Host(`social.pizzapim.nl`) && PathPrefix(`/api/v1/streaming`))"
       - traefik.http.routers.mastodon-streaming.service=mastodon-streaming

roles/miniflux/templates/docker-compose.yml.j2

@@ -12,6 +12,7 @@ services:
       - default
       - traefik
     labels:
+      - traefik.enable=true
       - traefik.http.routers.miniflux.entrypoints=websecure
       - traefik.http.routers.miniflux.rule=Host(`rss.pizzapim.nl`)
       - traefik.http.routers.miniflux.tls=true

roles/radicale/templates/docker-compose.yml.j2

@@ -16,7 +16,9 @@ services:
     networks:
       - traefik
     labels:
+      - traefik.enable=true
       - traefik.http.routers.radicale.entrypoints=websecure
       - traefik.http.routers.radicale.rule=Host(`dav.pizzapim.nl`)
       - traefik.http.routers.radicale.tls=true
       - traefik.http.routers.radicale.tls.certresolver=pizzapim
+      - traefik.http.routers.radicale.service=radicale

roles/seafile/templates/docker-compose.yml.j2

@@ -35,6 +35,7 @@ services:
       - SEAFILE_SERVER_LETSENCRYPT=false   # Whether to use https or not. 
       - SEAFILE_SERVER_HOSTNAME={{ seafile_domain }} # Specifies your host name if https is enabled. 
     labels:
+      - traefik.enable=true
       - traefik.http.routers.seafile.entrypoints=websecure
       - traefik.http.routers.seafile.rule=Host(`files.geokunis2.nl`)
       - traefik.http.routers.seafile.tls=true

roles/traefik/tasks/main.yml

@@ -16,10 +16,12 @@
   template:
     src: "{{ role_path }}/templates/traefik.toml.j2"
     dest: "{{ service_dir }}/traefik.toml"
+  register: traefik
 - name: Copy services.toml
   copy:
     src: "{{ role_path }}/files/services.toml"
     dest: "{{ service_dir }}/services.toml"
+  register: services
 - name: Create traefik network
   docker_network:
     name: "traefik"
@@ -28,3 +30,4 @@
     project_src: "{{ service_dir }}"
     pull: true
     remove_orphans: true
+    restarted: "{{ traefik.changed or services.changed }}"

roles/traefik/templates/traefik.toml.j2

@@ -26,6 +26,7 @@ loglevel = "DEBUG"
 
 [providers.docker]
   endpoint = "unix:///var/run/docker.sock"
+  exposedByDefault = false
 
 [providers.file]
   filename = "/etc/traefik/services.toml"