From b2df5636feaf7e3f02491f4df7206fc7141bb690 Mon Sep 17 00:00:00 2001
From: venus <git@riverrooks.art>
Date: Wed, 16 Sep 2026 19:41:53 -0500
Subject: [PATCH] stashing changes, trying some things out with the
 configuration of the ca server and which network to put it on

---
 compose.yml  | 10 ++++++++++
 dnsmasq.conf |  4 ++++
 traefik.yml  |  6 ++++++
 3 files changed, 20 insertions(+)

diff --git a/compose.yml b/compose.yml
index 16f4dae..e109fc8 100755
--- a/compose.yml
+++ b/compose.yml
@@ -21,11 +21,16 @@ services:
       - "80:80"
       - "443:443"
       - "51820:51820/udp"
+      # - "9000:9000"
+      # - "53:53"
     networks:
       - backend
     dns:
       - 1.1.1.1
       - 8.8.8.8
+    extra_hosts:
+      - "wg.dfnk:127.0.0.1"
+      - "ca.dfnk:127.0.0.1"
     labels:
       - "traefik.enable=true"
       - "traefik.http.services.wg-easy-svc.loadbalancer.server.port=51821"
@@ -43,6 +48,7 @@ services:
       - "traefik.http.routers.wg-easy-private.entrypoints=websecure"
       # No certresolver here, will mess with browsers
       - "traefik.http.routers.wg-easy-private.tls=true"
+      - "traefik.http.routers.wg-easy-private.tls.certresolver=defenk"
       - "traefik.http.routers.wg-easy-private.service=wg-easy-svc"
 
   traefik: # This is the proxy for all other services. Using labels it dynamically secures reverse proxies to other containters
@@ -86,6 +92,10 @@ services:
     depends_on: 
       - wg-easy
     network_mode: "service:wg-easy"
+    # networks:
+    #   backend:
+    #     - ca.dfnk
+    #     - step-ca
 
 networks:
   # Backend network for docker containers to talk to eachother
diff --git a/dnsmasq.conf b/dnsmasq.conf
index ce5ae00..cbd36a4 100755
--- a/dnsmasq.conf
+++ b/dnsmasq.conf
@@ -1,3 +1,6 @@
+# Dont red host resolv.conf
+no-resolv
+
 # forward default traffic
 server=1.1.1.1
 server=8.8.8.8
@@ -6,3 +9,4 @@ server=8.8.8.8
 address=/.dfnk/10.8.0.1
 address=/proxmox.dfnk/10.8.0.2
 address=/media.dfnk/192.168.1.35
+address=/ca.dfnk/10.8.0.1
diff --git a/traefik.yml b/traefik.yml
index 621c2be..568675d 100755
--- a/traefik.yml
+++ b/traefik.yml
@@ -52,3 +52,9 @@ certificatesResolvers:
         resolvers:
           - "1.1.1.1:53"
           - "8.8.8.8:53"
+  defenk:
+    acme:
+      email: "admin-defenk@riverrooks.dev"
+      caServer: "https://127.0.0.1:9000/acme/acme/directory"
+      storage: "/letsencrypt/internal_acme.json"
+      tlsChallenge: {}