Refactor Traefik routing rules in adguardhome.yml

swarm/adguardhome.yml

@@ -4,9 +4,9 @@ services:
     volumes:
       - /var/data/adguardhome_conf:/opt/adguardhome/conf
       - /var/data/adguardhome_work:/opt/adguardhome/work
-    ports:
+    # ports:
       # DNS
-        - 53:53
+        # - 53:53
         # # DHCP server
         # - 67:67/udp
         # - 68:68/udp
@@ -28,6 +28,10 @@ services:
         - traefik.enable=true
         - traefik.docker.network=traefik-public
         - traefik.constraint-label=traefik-public
+        - traefik.tcp.routers.adguardhome_tcp.entrypoints=dns
+        - traefik.tcp.routers.adguardhome_tcp.rule=HostSNI(`*`)
+        - traefik.tcp.routers.adguardhome_tcp.service=adguardhome_dns_service
+        - traefik.tcp.services.adguardhome_dns_service.loadbalancer.server.port=53
         - traefik.http.routers.adguardhome.entrypoints=https
         - traefik.http.routers.adguardhome.rule=Host(`guard.${DOMAIN}`)
         - traefik.http.routers.adguardhome.tls.certresolver=le

swarm/core.yml

@@ -4,6 +4,9 @@ services:
     # Use the latest v3.0.x Traefik image available
     image: traefik:latest
     ports:
+      # - target: 53
+      #   published: 53
+      #   mode: host
       - target: 80
         published: 80
         mode: host
@@ -109,6 +112,8 @@ services:
       - --entrypoints.http.http.redirections.entrypoint.to=https
       - --entrypoints.http.http.redirections.entrypoint.scheme=https
       - --entrypoints.http.http.redirections.entrypoint.permanent=true
+      # Create an entrypoint "dns" listening on port 53
+      # - --entrypoints.dns.address=:53
       # Create an entrypoint "postgres-socket" listening on port 5432
       - --entrypoints.postgres-socket.address=:5432
       # Others entrypoints can be created, like a TCP entrypoint