stashing changes, trying some things out with the configuration of the ca server and which network to put it on

compose.yml

@@ -21,11 +21,16 @@ services:
       - "80:80"
       - "443:443"
       - "51820:51820/udp"
+      # - "9000:9000"
+      # - "53:53"
     networks:
       - backend
     dns:
       - 1.1.1.1
       - 8.8.8.8
+    extra_hosts:
+      - "wg.dfnk:127.0.0.1"
+      - "ca.dfnk:127.0.0.1"
     labels:
       - "traefik.enable=true"
       - "traefik.http.services.wg-easy-svc.loadbalancer.server.port=51821"
@@ -43,6 +48,7 @@ services:
       - "traefik.http.routers.wg-easy-private.entrypoints=websecure"
       # No certresolver here, will mess with browsers
       - "traefik.http.routers.wg-easy-private.tls=true"
+      - "traefik.http.routers.wg-easy-private.tls.certresolver=defenk"
       - "traefik.http.routers.wg-easy-private.service=wg-easy-svc"
 
   traefik: # This is the proxy for all other services. Using labels it dynamically secures reverse proxies to other containters
@@ -86,6 +92,10 @@ services:
     depends_on: 
       - wg-easy
     network_mode: "service:wg-easy"
+    # networks:
+    #   backend:
+    #     - ca.dfnk
+    #     - step-ca
 
 networks:
   # Backend network for docker containers to talk to eachother

dnsmasq.conf

@@ -1,3 +1,6 @@
+# Dont red host resolv.conf
+no-resolv
+
 # forward default traffic
 server=1.1.1.1
 server=8.8.8.8
@@ -6,3 +9,4 @@ server=8.8.8.8
 address=/.dfnk/10.8.0.1
 address=/proxmox.dfnk/10.8.0.2
 address=/media.dfnk/192.168.1.35
+address=/ca.dfnk/10.8.0.1

traefik.yml

@@ -52,3 +52,9 @@ certificatesResolvers:
         resolvers:
           - "1.1.1.1:53"
           - "8.8.8.8:53"
+  defenk:
+    acme:
+      email: "admin-defenk@riverrooks.dev"
+      caServer: "https://127.0.0.1:9000/acme/acme/directory"
+      storage: "/letsencrypt/internal_acme.json"
+      tlsChallenge: {}