Enforce mTLS on private-admin Traefik routes

2026-04-13 12:05:43 +10:00
parent 0ddbb7d7ad
commit 24047b0eaa
15 changed files with 200 additions and 0 deletions
@@ -20,6 +20,7 @@ services:
      - traefik.http.routers.portainer.entrypoints=websecure
      - traefik.http.routers.portainer.tls=true
      - traefik.http.routers.portainer.tls.certresolver=myresolver
+      - traefik.http.routers.portainer.tls.options=mtls-private-admin@file
      - io.portainer.accesscontrol.public
      # Service -> Portainer listens on 9000 inside the container
      - traefik.http.services.portainer.loadbalancer.server.port=9000