crafty-controller: Traefik https backend scheme + scoped skip-verify transport (fixes 502 to TLS backend)

2026-06-26 10:28:59 +02:00
parent 9abd392247
commit 1216a8a78a
2 changed files with 18 additions and 0 deletions
@@ -38,6 +38,11 @@ services:
      - "traefik.http.routers.crafty-controller.tls=true"
      - "traefik.http.routers.crafty-controller.tls.certresolver=letsencrypt"
      - "traefik.http.services.crafty-controller.loadbalancer.server.port=8443"
+      # Crafty serves self-signed HTTPS on :8443 (no plain-HTTP panel) — Traefik must speak https to the
+      # backend and skip verifying the per-container self-signed cert (named transport defined in the
+      # controller-managed traefik dynamic config; verification stays ON for all other backends).
+      - "traefik.http.services.crafty-controller.loadbalancer.server.scheme=https"
+      - "traefik.http.services.crafty-controller.loadbalancer.serverstransport=insecure-skip-verify@file"

 volumes:
  crafty_backups: