change directory structure

ansible/roles/traefik/templates/docker-compose.yml.j2

@@ -0,0 +1,35 @@
+version: '3'
+
+networks:
+  traefik:
+    external: true
+
+services:
+  reverse-proxy:
+    restart: always
+    image: traefik:v2.9
+    container_name: traefik
+    ports:
+      - "443:443"
+      - "80:80"
+      - "{{ git_ssh_port }}:{{ git_ssh_port }}"
+      - "{{ traefik_api_port }}:{{ traefik_api_port }}"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - {{ service_dir }}/traefik.toml:/etc/traefik/traefik.toml
+      - {{ service_dir }}/services.toml:/etc/traefik/services.toml
+      - {{ service_dir }}/acme.json:/acme.json
+    networks:
+      - traefik
+    labels:
+      - traefik.enable=true
+
+      - traefik.http.routers.esrom.entrypoints=websecure
+      - traefik.http.routers.esrom.service=esrom@file
+      - traefik.http.routers.esrom.rule=Host(`geokunis2.nl`)
+      - traefik.http.routers.esrom.tls=true
+      - traefik.http.routers.esrom.tls.certresolver=letsencrypt
+
+      - traefik.http.routers.traefik.rule=Host(`max.dmz`)
+      - traefik.http.routers.traefik.entrypoints=internal
+      - traefik.http.routers.traefik.service=api@internal

ansible/roles/traefik/templates/traefik.toml.j2

@@ -0,0 +1,38 @@
+loglevel = "DEBUG"
+
+[entryPoints]
+  [entryPoints.web]
+  address = ":80"
+  [entryPoints.web.http.redirections.entryPoint]
+    to = "websecure"
+    scheme = "https"
+    permanent = true
+  [entryPoints.websecure]
+    address = ":443"
+  [entryPoints.ssh]
+    address = ":{{ git_ssh_port }}"
+  [entryPoints.video]
+    address = ":{{ jitsi_videobridge_port }}/udp"
+  [entryPoints.internal]
+    address = ":{{ traefik_api_port }}"
+
+[api]
+  insecure = false
+  dashboard = true
+
+[metrics]
+  [metrics.prometheus]
+    entryPoint = "internal"
+
+[providers.docker]
+  endpoint = "unix:///var/run/docker.sock"
+  exposedByDefault = false
+
+[providers.file]
+  filename = "/etc/traefik/services.toml"
+
+[certificatesResolvers.letsencrypt.acme]
+  email = "pim@kunis.nl"
+  storage = "acme.json"
+  [certificatesResolvers.letsencrypt.acme.httpChallenge]
+    entryPoint = "web"