From 588c9165ef0524b98a5ae5f56b52149ef1ae46a8 Mon Sep 17 00:00:00 2001
From: Jade Ellis <jade@ellis.link>
Date: Sat, 19 Oct 2024 22:43:11 +0100
Subject: [PATCH] Use DNS challenge

---
 servers/containers/traefik.container | 2 ++
 servers/traefik/config.toml          | 4 +++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/servers/containers/traefik.container b/servers/containers/traefik.container
index 129ebe86..1cff27fd 100644
--- a/servers/containers/traefik.container
+++ b/servers/containers/traefik.container
@@ -44,6 +44,8 @@ Network=web.network
 
 Exec=traefik --configFile=/etc/traefik/config.toml 
 
+Environment="CF_DNS_API_TOKEN=OzdeI-Km-mI3_WlSOO83Zu0id7rmdd0k2QhOoGNE"
+
 Label="traefik.http.middlewares.compress.compress=true"
 
 Label="traefik.http.middlewares.hsts.headers.stsincludesubdomains=false"
diff --git a/servers/traefik/config.toml b/servers/traefik/config.toml
index 64c833e9..37dc99dc 100644
--- a/servers/traefik/config.toml
+++ b/servers/traefik/config.toml
@@ -65,4 +65,6 @@ storage = "/certificates/acme.json"
 
 # - "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
 # - "--certificatesresolvers.letsencrypt.acme.httpChallenge.entryPoint=http"
-tlschallenge = true
+# tlschallenge = true
+[certificatesresolvers.letsencrypt.acme.dnschallenge]
+provider = "cloudflare"