diff --git a/docker-compose.yml b/docker-compose.yml index 5b0ba9d..633201e 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -40,6 +40,10 @@ services: - "traefik.http.services.${APP_NAME}.loadbalancer.server.port=443" - "traefik.http.services.${APP_NAME}.loadbalancer.server.scheme=https" + # ServerTransport para ignorar validación SSL del backend (certificados autofirmados) + - "traefik.http.servertransports.meshcentral-transport.serverstransport.insecureskipverify=true" + - "traefik.http.services.${APP_NAME}.loadbalancer.serverstransport=meshcentral-transport" + # Router principal con Authentik Forward Auth para rutas de usuario - "traefik.http.routers.${APP_NAME}.rule=Host(`${APP_DOMAIN}`) && !PathPrefix(`/agent.ashx`) && !PathPrefix(`/meshrelay.ashx`) && !PathPrefix(`/devicefile.ashx`) && !PathPrefix(`/amtactivate`) && !PathPrefix(`/meshsettings`) && !PathPrefix(`/devicepower.ashx`)" - "traefik.http.routers.${APP_NAME}.entrypoints=websecure"