Add traefik reverse proxy

containers/traefik/templates/conf/cockpit.yml.j2

@@ -0,0 +1,14 @@
+http:
+  routers:
+    cockpit:
+      rule: "Path(`/cockpit`)"
+      entryPoints: https
+      service: cockpit
+      tls:
+        certresolver: wildcard
+
+  services:
+    cockpit:
+      loadBalancer:
+        servers:
+          - url: "http://131.175.120.208:9090"

containers/traefik/templates/traefik.yml.j2

@@ -0,0 +1,40 @@
+log:
+  level: "ERROR"
+
+api:
+  dashboard: true
+
+accessLog:
+  filters:
+    statusCodes:
+      - "400-418"
+      - "500-508"
+
+entryPoints:
+  http:
+    address: ":80"
+    http:
+      redirections:
+        entryPoint:
+          to: https
+          scheme: https
+          permanent: true
+  https:
+    address: ":443"
+
+providers:
+  docker:
+    endpoint: "unix:///var/run/docker.sock"
+    exposedByDefault: false
+  file:
+    directory: "/etc/traefik/conf"
+    watch: true
+
+certificatesResolvers:
+  wildcard:
+    acme:
+      email: {{ vault_acme_admin_email }}
+      storage: "/etc/traefik/acme_wildcard.json"
+      keyType: "EC256"
+      httpChallenge:
+        entryPoint: http