feat: fix insecure transport

proxies/traefik/docker-compose.yml

@@ -17,6 +17,7 @@ services:
       - ${CONFIG_ROOT}/traefik/traefik.yml:/traefik.yml:ro
       - ${CONFIG_ROOT}/traefik/acme.json:/acme.json
       - ${CONFIG_ROOT}/traefik/logs:/var/log/traefik
+      - ${CONFIG_ROOT}/traefik/dynamic:/etc/traefik/dynamic:ro
     secrets:
       - cf_dns_api_token
     labels:

version_control/gittea/docker-compose.yml

@@ -16,8 +16,20 @@ services:
       homepage.group: "Version Control"
       homepage.name: "Gitea"
       homepage.icon: "gitea.png"
-      homepage.href: "http://gitea:3000"
+      homepage.href: "https://gitea.${DOMAIN}"
       homepage.description: "Git Server"
+      traefik.enable: "true"
+      # Web
+      traefik.http.routers.gitea.rule: "Host(`gitea.${DOMAIN}`)"
+      traefik.http.routers.gitea.entrypoints: "https"
+      traefik.http.routers.gitea.tls.certresolver: "cloudflare"
+      traefik.http.services.gitea.loadbalancer.server.url: "http://${HOST_IP}:3000"
+      # SSH
+      traefik.tcp.routers.gitea-ssh.rule: "HostSNI(`git.${DOMAIN}`)"
+      traefik.tcp.routers.gitea-ssh.entrypoints: "https"
+      traefik.tcp.routers.gitea-ssh.service: "gitea-ssh"
+      traefik.tcp.routers.gitea-ssh.tls.passthrough: "true"
+      traefik.tcp.services.gitea-ssh.loadbalancer.server.address: "${HOST_IP}:222"
     networks:
       - gitea
     volumes: