我有个拉拉项目在码头集装箱中运行。其中一个停靠容器是traefik,但是当我尝试运行docker-compose up
命令时,它返回一个日志:msg="Failed to read new account, ACME data conversion is not available : permissions 755 for acme.json are too open, please use 600"
。我试图在ssh上更改asme.json的权限,但即使在chmod 600 acme.json
之后,它也会再次返回这个日志。最重要的是,当我试图通过https连接到站点时,会出现一个错误404 page not found
,当我设置nginx容器时也会出现类似的错误,因为我错误地指定了项目的路径,但是我现在不知道该做什么。这是我的1)traefik.tom
logLevel = "ERROR"
defaultEntryPoints = ["http", "https"]
[entryPoints]
[entryPoints.http]
address = ":80"
[entryPoints.http.redirect]
entryPoint = "https"
[entryPoints.https]
address = ":443"
[entryPoints.https.tls]
[api]
[ping]
# Enable Docker configuration backend
[docker]
network = "nginx-proxy"
domain = "mysite"
watch = true
exposedByDefault = false
[acme]
email = "my@gmail.com"
storage = "acme.json"
entryPoint = "https"
onHostRule = true
caServer = "https://acme-v02.api.letsencrypt.org/directory"
[acme.httpChallenge]
entryPoint = "http"
[acme.dnsChallenge]
provider = "cloudflare"
delayBeforeCheck = 0```
And 2) docker-compose.traefik.yml
---
version: "3.6"
networks:
default:
name: nginx-proxy
external: true
services:
traefik:
image: "traefik:v1.7.14"
container_name: ${COMPOSE_PROJECT_NAME}.traefik
restart: unless-stopped
ports:
- 80:80
- 443:443
expose:
# traefik dashboard port
- 8080
labels:
- "traefik.enable=true"
- "traefik.http.routers.traefik.entrypoints=https"
- "traefik.http.routers.traefik.rule=Host(`mysite`)"
- "traefik.http.routers.traefik.tls=true"
- "traefik.http.routers.traefik.tls.certresolver=cloudflare"
- "traefik.http.routers.traefik.service=api@internal"
- "traefik.http.services.traefik-traefik.loadbalancer.server.port=888"
- "traefik.port=8080"
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- ./docker/traefik/traefik.toml:/etc/traefik/traefik.toml
- ./docker/traefik/:/acme.json
environment:
- CF_API_EMAIL=myapifemail
- CF_API_KEY=myapikey
发布于 2022-03-18 17:27:11
根据我所看到的,您正在使用卷来存储所描述的这里的acme证书。但你似乎误读了卷的装订
- ./docker/traefik/:/acme.json
而不是
- ./docker/traefik/acme.json:/acme.json
这样做,文件夹被挂载为一个文件,并以错误的权限结束。纠正这条线应该能让它发挥作用。
https://stackoverflow.com/questions/71476296
复制相似问题