Adding Azure

traefikturkey · Mar 7, 2024 · 377bb2b · 377bb2b
1 parent 3837142
commit 377bb2b
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 2 deletions.
diff --git a/.templates/env.template b/.templates/env.template
@@ -10,6 +10,19 @@ CF_DNS_API_TOKEN=<cloudflare api token>
 HOST_NAME=<your_server_name_without_domain>
 HOST_DOMAIN=<your_domain.com>
 
+###############################################
+#
+# AzureDNS DNS-01 challenge settings
+#   https://blog.ls-al.com/traefik-wildcard-certificate-using-azure-dns/
+#
+###############################################
+#DNS_CHALLENGE_PROVIDER=azure
+#AZURE_CLIENT_ID=
+#AZURE_CLIENT_SECRET=
+#AZURE_SUBSCRIPTION_ID=
+#AZURE_TENANT_ID=
+#AZURE_RESOURCE_GROUP=
+
 # https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#Time_Zone_abbreviations
 # choose a value from the TZ database name column on the wikipedia page above
 TZ=US/Eastern
@@ -24,6 +37,7 @@ TZ=US/Eastern
 ###############################################
 # Traefik settings 
 ###############################################
+DNS_CHALLENGE_API_EMAIL=${CF_API_EMAIL}
 TRAEFIK_ACCESSLOG=true
 TRAEFIK_LOG_LEVEL=DEBUG
 #TRAEFIK_DASHBOARD_ENABLE=

diff --git a/docker-compose.yml b/docker-compose.yml
@@ -49,8 +49,8 @@ services:
       - --entrypoints.websecure.http.tls.domains[0].sans=*.${HOST_DOMAIN}
       - --serverstransport.insecureskipverify=true
       - --certificatesresolvers.letsencrypt.acme.dnschallenge=true
-      - --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=cloudflare
-      - --certificatesresolvers.letsencrypt.acme.email=${CF_API_EMAIL}
+      - --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=${DNS_CHALLENGE_PROVIDER:-cloudflare}
+      - --certificatesresolvers.letsencrypt.acme.email=${DNS_CHALLENGE_API_EMAIL}
       - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
       - --certificatesResolvers.letsencrypt.acme.dnsChallenge.delayBeforeCheck=${CF_RESOLVER_WAITTIME:-60}
       - --certificatesresolvers.letsencrypt.acme.dnschallenge.resolvers=1.1.1.1:53,1.0.0.1:53