From 5e5e16bafd9524bf708341474fcd400791e8b94a Mon Sep 17 00:00:00 2001
From: Pim Kunis <pim@kunis.nl>
Date: Tue, 2 May 2023 14:46:04 +0200
Subject: [PATCH] enable https for forgejo

---
 ansible/roles/forgejo/docker-stack.yml.j2 | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/ansible/roles/forgejo/docker-stack.yml.j2 b/ansible/roles/forgejo/docker-stack.yml.j2
index 8874beb..1bd5b19 100644
--- a/ansible/roles/forgejo/docker-stack.yml.j2
+++ b/ansible/roles/forgejo/docker-stack.yml.j2
@@ -30,10 +30,12 @@ services:
         constraints:
           - "node.labels.forgejo == true"
       labels:
-        - traefik.port=80
+        - traefik.port=443
         - traefik.enable=true
-        - traefik.http.routers.forgejo.entrypoints=web
+        - traefik.http.routers.forgejo.entrypoints=websecure
         - traefik.http.routers.forgejo.rule=Host(`{{ git_domain }}`)
+        - traefik.http.routers.forgejo.tls=true
+        - traefik.http.routers.forgejo.tls.certresolver=letsencrypt
         - traefik.http.routers.forgejo.service=forgejo
         - traefik.http.services.forgejo.loadbalancer.server.port=3000
         - traefik.docker.network=traefik