expose traefik dashboard

roles/traefik/templates/docker-compose.yml.j2

@@ -9,12 +9,6 @@ services:
     restart: always
     image: traefik:v2.9
     container_name: traefik
-    command:
-      - "--providers.docker"
-      - "--entrypoints.web.address=:80"
-      - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
-      - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
-      - "--entrypoints.websecure.address=:443"
     ports:
       - "443:443"
       - "80:80"
@@ -24,12 +18,22 @@ services:
       - {{ service_dir }}/traefik.toml:/etc/traefik/traefik.toml
       - {{ service_dir }}/services.toml:/etc/traefik/services.toml
       - {{ service_dir }}/acme.json:/acme.json
+      - {{ service_dir }}/basic_auth_users:/basic_auth_users
     networks:
       - traefik
     labels:
       - traefik.enable=true
+
       - traefik.http.routers.esrom.entrypoints=websecure
       - traefik.http.routers.esrom.service=esrom@file
       - traefik.http.routers.esrom.rule=Host(`geokunis2.nl`)
       - traefik.http.routers.esrom.tls=true
       - traefik.http.routers.esrom.tls.certresolver=geokunis
+
+      - traefik.http.routers.traefik.rule=Host(`traefik.pizzapim.nl`)
+      - traefik.http.routers.traefik.entrypoints=websecure
+      - traefik.http.routers.traefik.tls=true
+      - traefik.http.routers.traefik.tls.certresolver=pizzapim
+      - traefik.http.routers.traefik.service=api@internal
+      - traefik.http.routers.traefik.middlewares=basic-auth
+      - traefik.http.middlewares.basic-auth.basicauth.usersfile=/basic_auth_users

roles/traefik/templates/traefik.toml.j2

@@ -3,14 +3,20 @@ loglevel = "DEBUG"
 [entryPoints]
   [entryPoints.web]
   address = ":80"
+  [entryPoints.web.http.redirections.entryPoint]
+    to = "websecure"
+    scheme = "https"
+    permanent = true
   [entryPoints.websecure]
-  address = ":443"
+    address = ":443"
   [entryPoints.ssh]
-  address = ":{{ git_ssh_port }}"
+    address = ":{{ git_ssh_port }}"
   [entryPoints.video]
-  address = ":{{ jitsi_videobridge_port }}/udp"
+    address = ":{{ jitsi_videobridge_port }}/udp"
 
 [api]
+  insecure = false
+  dashboard = true
 
 [providers.docker]
   endpoint = "unix:///var/run/docker.sock"