✨ ACME CommisSign via VIP
Decision record
The ACME CommisSign mapping should be served by all INTERNAL reverse proxies. Therefore, traffic should go via the VIP.
To do so, we must expose the 8443 port on the Traefik container, and add a router on the WAF layer for TLS termination.
Changes
-
✨ Expose port 8443 on Traefik ifview_name == "internal"
-
✨ Route traffic for CommisSign to WAF layer ifview_name == "internal"
-
🔖 v0.43.0
Edited by Youssef BOUFNICHEL