如何不重启服务更新traefik的tls证书

By minirplus on 2023-02-28 in DEV

目前免费证书一般每隔90天都需要重新签发，但是直接替换证书后traefik没办法自动加载新证书，重启traefik又会中断不使用tls的服务。

前提

使用dynamic配置，即在docker-compose中设置command
– “–providers.file.directory=/etc/traefik/dynamic”
– “–providers.file.watch=true”

# tls:

# stores:

# default:

# defaultCertificate:

# certFile: /etc/traefik/dynamic/cert/certificate.crt

# keyFile: /etc/traefik/dynamic/cert/private.key

# certificates:

# - certFile: /etc/traefik/dynamic/cert/certificate.crt

# keyFile: /etc/traefik/dynamic/cert/private.key

# options:

# foo:

# minVersion: VersionTLS12

# cipherSuites:

# - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

# - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

# - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

# - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

# - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256