friendly-bits
Traefik
Hello, I use on a traefik server in a docker container to generate my Https certificates. Geoip-shell is configured to authorize FR connections only. When disabled, traefik can generate certificates. When enabled, traefik can no longer generate certificates. How do I do this? Thanks
Hi, you need an IP list of the IP ranges used by this service. Please see #26, #33 for 2 examples of such lists. Once you have the list, process it in a way which results in a newline-separated list of IP ranges and/or addresses (in #26 I explained how to process a CSV file with such list). The resulting newline-separated IP list file can be imported into geoip-shell via a command like geoip-shell configure -A <path_to_ip_list_file>.
If you find such list, please post a link here so other people using traefik can refer to it as well.
I'm not sure what you mean by "watching this" but you probably just need to use a search engine and find that list. Or ask on traefik's support forum (if they have one).
Thank you, I'm watching this.
https://github.com/n3roGit/LetsEncryptIPs
The IPs can change anytime.
I'm not sure how traefik is related to letsencrypt but if we are actually talking about letsencrypt then one could allow the ip's posted on the page @v1rusnl linked to as a temporary workaround, but because these ip's may change any time, this is probably not the best solution.
There are known proper solutions. Please see #35.