From 5ae67c57c02a8fda4479f58e4adcc12b41559025 Mon Sep 17 00:00:00 2001
From: Cantibra <cantibra@privlab.it>
Date: Tue, 27 Jan 2026 21:22:05 +0100
Subject: [PATCH] Commenting out the default HTTPS and ACME settings to allow a
 clean start after installation.

---
 root/etc/traefik/providers.yml | 92 +++++++++++++++++-----------------
 root/etc/traefik/traefik.yml   | 10 ++--
 2 files changed, 51 insertions(+), 51 deletions(-)

diff --git a/root/etc/traefik/providers.yml b/root/etc/traefik/providers.yml
index 428d693..4e65c17 100644
--- a/root/etc/traefik/providers.yml
+++ b/root/etc/traefik/providers.yml
@@ -30,41 +30,41 @@ http:
         - http
       middlewares:
         - compress
-        - redirectscheme
+#        - redirectscheme
       priority: 1
       rule: HostRegexp(`^.*$`)
       service: catchall
-    catchall-tls:
-      entryPoints:
-        - https
-      middlewares:
-        - compress
-        - headers
-      priority: 1
-      rule: HostRegexp(`^.*$`)
-      service: catchall
-      tls: {}
+#    catchall-tls:
+#      entryPoints:
+#        - https
+#      middlewares:
+#        - compress
+#        - headers
+#      priority: 1
+#      rule: HostRegexp(`^.*$`)
+#      service: catchall
+#      tls: {}
     traefik:
       entryPoints:
         - http
       middlewares:
         - auth
         - compress
-        - redirectscheme
+#        - redirectscheme
       priority: 2
       rule: Host(`localhost`)
       service: api@internal
-    traefik-tls:
-      entryPoints:
-        - https
-      middlewares:
-        - auth
-        - compress
-        - headers
-      priority: 2
-      rule: Host(`localhost`)
-      service: api@internal
-      tls: {}
+#    traefik-tls:
+#      entryPoints:
+#        - https
+#      middlewares:
+#        - auth
+#        - compress
+#        - headers
+#      priority: 2
+#      rule: Host(`localhost`)
+#      service: api@internal
+#      tls: {}
   services:
     catchall:
       loadBalancer:
@@ -73,29 +73,29 @@ http:
 
 # - - - - - TCP - - - - - #
 
-tcp:
-  routers:
-    acme:
-      rule: HostSNI(`*`)
-      service: acme
-      tls:
-        passthrough: true
-        certResolver: dns-01
-        domains:
-          - main: example.com
-            sans:
-              - '*.example.com'
-  services:
-    acme:
-      loadBalancer:
-        servers:
-          - address: localhost:80
+#tcp:
+#  routers:
+#    acme:
+#      rule: HostSNI(`*`)
+#      service: acme
+#      tls:
+#        passthrough: true
+#        certResolver: dns-01
+#        domains:
+#          - main: example.com
+#            sans:
+#              - '*.example.com'
+#  services:
+#    acme:
+#      loadBalancer:
+#        servers:
+#          - address: localhost:80
 
 # - - - - - TLS - - - - - #
 
-tls:
-  stores:
-    default:
-      defaultCertificate:
-        certFile: /etc/ssl/traefik/root.crt
-        keyFile: /etc/ssl/traefik/root.key
+#tls:
+#  stores:
+#    default:
+#      defaultCertificate:
+#        certFile: /etc/ssl/traefik/root.crt
+#        keyFile: /etc/ssl/traefik/root.key
diff --git a/root/etc/traefik/traefik.yml b/root/etc/traefik/traefik.yml
index ca18252..b37fac5 100644
--- a/root/etc/traefik/traefik.yml
+++ b/root/etc/traefik/traefik.yml
@@ -16,7 +16,7 @@ api:
 #      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
 #      email: hostmaster@localhost
 #      storage: /var/lib/traefik/acme.json
-#      keyType: [RSA4096|EC384] # Select
+#      keyType: [RSA4096|EC384]
 #      httpChallenge:
 #        entryPoint: http
 #  tls:
@@ -24,14 +24,14 @@ api:
 #      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
 #      email: hostmaster@localhost
 #      storage: /var/lib/traefik/acme.json
-#      keyType: [RSA4096|EC384] # Select
+#      keyType: [RSA4096|EC384]
 #      tlsChallenge: {}
 #  dns-01:
 #    acme:
 #      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
 #      email: hostmaster@localhost
 #      storage: /var/lib/traefik/acme.json
-#      keyType: [RSA4096|EC384] # Select
+#      keyType: [RSA4096|EC384]
 #      dnsChallenge:
 #        resolvers:
 #          - "localhost:53"
@@ -45,8 +45,8 @@ api:
 entryPoints:
   http:
     address: :80
-  https:
-    address: :443
+#  https:
+#    address: :443
 
 # - - - - - Log - - - - - #