Back

Using docker-compose.override to disable TLS 1.0/1.1

  • 0
  • Self Hosted
  • Web
mav8rick
12 Mar, 2024, 05:28

Hi,

Has anyone managed to turn off TLS 1.0/1.1 without changing the docker-compose.yml file? I've been trying and trying but either the effect didn't kick in or it locks up the whole Traefik.

So far, what I gathered is that you need to have an external config file and then have Traefik pick it up by specifying a file provider in the override file.

I have another node.js server with Traefik fronting it an it's quite easy to achieve that:

  • just include the yml in a certain directory -include "traefik.http.routers.api.tls.options=default" in the labels for the service

I am uploading both the additional config and the docker-compose file for that API server.

I am just hoping I can somehow achieve the very same thing using docker-compose.override

Some references: https://www.smarthomebeginner.com/traefik-docker-compose-guide-2022/

TL;DR
Developers are seeking a way to disable TLS 1.0/1.1 without modifying the docker-compose.yml for Traefik in Appwrite. The solution involves creating an external config file and configuring Traefik to pick it up using a file provider in the override file. References for achieving this through docker-compose.override are provided in the discussion.
mav8rick
12 Mar, 2024, 05:29
ideclon
12 Mar, 2024, 05:33

The Traefik container in Appwrite is a bog-standard, unmodified Traefik container. There's no reason why an argument which works somewhere else shouldn't work here.

ideclon
12 Mar, 2024, 05:34

I will point out the Traefik version in your example is 2.10, whereas Appwrite v1.4.13 uses 2.9 and v1.5 uses 2.11, in case that makes any difference

Reply

Reply to this thread by joining our Discord

Reply on Discord

Need support?

Join our Discord

Get community support by joining our Discord server.

Join Discord

Get premium support

Join Appwrite Pro and get email support from our team.

Learn more