mirror of
https://github.com/jupyterhub/the-littlest-jupyterhub.git
synced 2025-12-18 21:54:05 +08:00
324ded0003
Always chomp left, never right. This is what we do in the helm chart templates and has been very easy to be consistent with for a good result with little to no issues.
33 lines
1.0 KiB
Smarty
33 lines
1.0 KiB
Smarty
# traefik.toml dynamic config (mostly TLS)
|
|
# dynamic config in the static config file will be ignored
|
|
{%- if https['enabled'] %}
|
|
[tls]
|
|
[tls.options.default]
|
|
minVersion = "VersionTLS12"
|
|
cipherSuites = [
|
|
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
|
|
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
|
|
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
|
|
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
|
|
"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
|
|
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
|
|
]
|
|
{%- if https['tls']['cert'] %}
|
|
[tls.stores.default.defaultCertificate]
|
|
certFile = "{{ https['tls']['cert'] }}"
|
|
keyFile = "{{ https['tls']['key'] }}"
|
|
{%- endif %}
|
|
|
|
{%- if https['letsencrypt']['email'] and https['letsencrypt']['domains'] %}
|
|
[tls.stores.default.defaultGeneratedCert]
|
|
resolver = "letsencrypt"
|
|
[tls.stores.default.defaultGeneratedCert.domain]
|
|
main = "{{ https['letsencrypt']['domains'][0] }}"
|
|
sans = [
|
|
{% for domain in https['letsencrypt']['domains'][1:] -%}
|
|
"{{ domain }}",
|
|
{%- endfor %}
|
|
]
|
|
{%- endif %}
|
|
{%- endif %}
|