diff --git a/templates/traefik/15/README.md b/templates/traefik/15/README.md index 3d669e0..896e991 100644 --- a/templates/traefik/15/README.md +++ b/templates/traefik/15/README.md @@ -18,6 +18,7 @@ - false: Enable http enpoints and disable https ones. - true: Enable http and https endpoints. - only: Enable https endpoints and redirect http to https. +- https_min_tls = "" # See the [traefik documentation](https://docs.traefik.io/configuration/entrypoints/#specify-minimum-tls-version) for allowed values. - acme_enable = false # Enable/Disable acme traefik support. - acme_email = "test@traefik.io" # acme user email - acme_ondemand = true # acme ondemand parameter. diff --git a/templates/traefik/15/docker-compose.yml.tpl b/templates/traefik/15/docker-compose.yml.tpl index b3c9b25..83d5fc6 100644 --- a/templates/traefik/15/docker-compose.yml.tpl +++ b/templates/traefik/15/docker-compose.yml.tpl @@ -28,6 +28,9 @@ services: - TRAEFIK_HTTPS_PORT=${https_port} - TRAEFIK_HTTPS_ENABLE=${https_enable} - TRAEFIK_HTTPS_COMPRESSION=${compress_enable} + {{- if ne .Values.https_min_tls ""}} + - TRAEFIK_HTTPS_MIN_TLS=${https_min_tls} + {{- end}} {{- if ne .Values.ssl_key ""}} - TRAEFIK_SSL_KEY=${ssl_key} {{- end}} diff --git a/templates/traefik/15/rancher-compose.yml b/templates/traefik/15/rancher-compose.yml index 62d8c0b..9d721ea 100644 --- a/templates/traefik/15/rancher-compose.yml +++ b/templates/traefik/15/rancher-compose.yml @@ -70,6 +70,14 @@ catalog: - false - true - only + - variable: "https_min_tls" + description: | + Minimal allowed tls version to accept connections from. + See the traefik documentation for allowed values. Default is `VersionTLS12`. + label: "Https min tls:" + required: false + default: "" + type: "string" - variable: "acme_enable" description: "Enable acme support on traefik." label: "ACME enable:" diff --git a/templates/traefik/16/README.md b/templates/traefik/16/README.md index 3d669e0..d97dd9a 100644 --- a/templates/traefik/16/README.md +++ b/templates/traefik/16/README.md @@ -18,6 +18,7 @@ - false: Enable http enpoints and disable https ones. - true: Enable http and https endpoints. - only: Enable https endpoints and redirect http to https. +- https_min_tls = "" # See the [traefik documentation](https://docs.traefik.io/configuration/entrypoints/#specify-minimum-tls-version) for allowed values. - acme_enable = false # Enable/Disable acme traefik support. - acme_email = "test@traefik.io" # acme user email - acme_ondemand = true # acme ondemand parameter. diff --git a/templates/traefik/16/docker-compose.yml.tpl b/templates/traefik/16/docker-compose.yml.tpl index 7ae12f9..9baafbc 100644 --- a/templates/traefik/16/docker-compose.yml.tpl +++ b/templates/traefik/16/docker-compose.yml.tpl @@ -28,6 +28,9 @@ services: - TRAEFIK_HTTPS_PORT=${https_port} - TRAEFIK_HTTPS_ENABLE=${https_enable} - TRAEFIK_HTTPS_COMPRESSION=${compress_enable} + {{- if ne .Values.https_min_tls ""}} + - TRAEFIK_HTTPS_MIN_TLS=${https_min_tls} + {{- end}} {{- if ne .Values.ssl_key ""}} - TRAEFIK_SSL_KEY=${ssl_key} {{- end}} diff --git a/templates/traefik/16/rancher-compose.yml b/templates/traefik/16/rancher-compose.yml index 7d315c6..8ddf699 100644 --- a/templates/traefik/16/rancher-compose.yml +++ b/templates/traefik/16/rancher-compose.yml @@ -70,6 +70,14 @@ catalog: - false - true - only + - variable: "https_min_tls" + description: | + Minimal allowed tls version to accept connections from. + See the traefik documentation for allowed values. Default is `VersionTLS12`. + label: "Https min tls:" + required: false + default: "" + type: "string" - variable: "acme_enable" description: "Enable acme support on traefik." label: "ACME enable:"