Added SSL support for local development

Author: korridor

.gitignore

@@ -1,4 +1,4 @@
-certificates/acme.json
+certificates/*
 .idea
 docker-compose.yml
 configs

configs-local/dynamic/tls.yml

@@ -0,0 +1,12 @@
+tls:
+  options:
+    default:
+      minVersion: VersionTLS12
+    mintls13:
+      minVersion: VersionTLS13
+
+  stores:
+    default:
+      defaultCertificate:
+        certFile: /certs/local.cert.pem
+        keyFile: /certs/local.key.pem

docker-compose.local.yml

@@ -12,8 +12,10 @@ services:
     container_name: reverse_proxy_traefik
     ports:
       - 80:80
+      - 443:443
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
+      - ./certificates:/certs:ro
       - ./configs/traefik.yml:/etc/traefik/traefik.yml
       - ./configs/dynamic:/etc/traefik/dynamic
     networks:

readme.md

@@ -235,6 +235,57 @@ services:
       - "traefik.http.services.someservice.loadbalancer.server.port=8080"
 ```
 
+### Enable SSL locally
+
+1. Install [mkcert](https://github.com/FiloSottile/mkcert)
+
+For example on macOS:
+
+```bash
+brew install mkcert
+brew install nss # if you use Firefox
+```
+
+Now install the local CA:
+
+```bash
+mkcert -install
+```
+
+3. Generate certificate
+
+Replace `someservice` with the domains that you are using for local development.
+
+```bash
+cd certificates
+mkcert -key-file local.key.pem -cert-file local.cert.pem "*.local" "*.test" "*.someservice.test" "*.someservice.local"
+```
+
+### Enable SSL in the docker-compose file
+
+```yaml
+version: '3.7'
+networks:
+  frontend:
+    external:
+      name: reverse-proxy-docker-traefik_routing
+services:
+  someservice:
+    restart: always
+    # ...
+    labels:
+      - ...
+      # http
+      - ...
+      # https
+      - "traefik.http.routers.someservice-https.rule=Host(`someservice.test`)"
+      - "traefik.http.routers.someservice-https.entrypoints=websecure"
+      - "traefik.http.routers.someservice-https.tls=true"
+    networks:
+     - frontend
+     - ...
+```
+
 ## Credits
 
 I used the following resources to create this setup: