Initialize Git Repository: 'Traefik'

traefik/lib/systemd/system/traefik-acme.path

@@ -0,0 +1,9 @@
+[Unit]
+Description=Traefik ACME Certificate Exporter
+ConditionFileNotEmpty=/var/lib/traefik/acme.json
+
+[Path]
+PathModified=/var/lib/traefik/acme.json
+
+[Install]
+WantedBy=multi-user.target

traefik/lib/systemd/system/traefik-acme.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=Traefik ACME Certificate Exporter
+ConditionPathIsDirectory=/etc/traefik/acme
+ConditionFileNotEmpty=/var/lib/traefik/acme.json
+
+[Service]
+Type=simple
+EnvironmentFile=/etc/traefik/acme/acme.env
+ExecStartPre=/usr/bin/sleep 3s
+ExecStart=/usr/bin/run-parts --exit-on-error --new-session /etc/traefik/acme
+User=traefik
+Group=traefik
+PrivateDevices=true
+PrivateTmp=true
+ProtectSystem=strict
+ReadWriteDirectories=/var/lib/traefik
+WorkingDirectory=/var/lib/traefik

traefik/lib/systemd/system/traefik.service

@@ -0,0 +1,30 @@
+[Unit]
+Description=Traefik Reverse Proxy
+ConditionPathExists=/etc/traefik/traefik.yml
+StartLimitBurst=3
+StartLimitIntervalSec=60
+After=network.target network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+AmbientCapabilities=CAP_NET_BIND_SERVICE
+EnvironmentFile=/etc/traefik/traefik.env
+Restart=on-failure
+ExecStart=/usr/sbin/traefik --configfile '/etc/traefik/traefik.yml'
+ExecStartPost=/usr/bin/sh -c "umask '022'; /usr/bin/pgrep --newest 'traefik' > '/run/traefik/traefik.pid'"
+ExecStop=/usr/bin/rm --force '/run/traefik/traefik.pid'
+User=traefik
+Group=traefik
+PrivateDevices=true
+PrivateTmp=true
+ProtectSystem=strict
+ReadWriteDirectories=/var/lib/traefik
+ReadWriteDirectories=/var/log/traefik
+RuntimeDirectory=traefik
+RuntimeDirectoryMode=755
+RuntimeDirectoryPreserve=yes
+WorkingDirectory=/var/lib/traefik
+
+[Install]
+WantedBy=multi-user.target