Update to 3.0.0

example/images/traefik/Dockerfile

@@ -1,7 +1,7 @@
 FROM danielberteaud/alpine:24.4-1
 MAINTAINER Daniel Berteaud <dbd@ehtrace.com>
 
-ARG VERSION=3.0.0-rc5
+ARG VERSION=3.0.0
 
 ADD https://github.com/traefik/traefik/releases/download/v${VERSION}/traefik_v${VERSION}_linux_amd64.tar.gz /tmp
 ADD https://github.com/traefik/traefik/releases/download/v${VERSION}/traefik_v${VERSION}_checksums.txt /tmp

example/traefik.nomad.hcl

@@ -118,13 +118,20 @@ job "traefik" {
       driver = "docker"
       user   = 5443
 
+
       vault {
-        policies = ["traefik"]
+        policies     = ["traefik"]
+        env          = false
+        disable_file = true
+        change_mode  = "noop"
       }
 
+
       config {
-        image   = "danielberteaud/traefik:3.0.0-rc5-1"
-        command = "traefik"
+        image           = "danielberteaud/traefik:3.0.0-1"
+        readonly_rootfs = true
+        pids_limit      = 300
+        command         = "traefik"
         args = [
           "--configfile=/secrets/traefik.yml"
         ]

traefik.nomad.hcl

@@ -66,14 +66,14 @@ job "[[ .instance ]]" {
       driver = "[[ $c.nomad.driver ]]"
       user   = 5443
 
-      vault {
-        policies = ["[[ .instance ]][[ .consul.suffix ]]"]
-      }
+[[ template "common/vault.policies" $c ]]
 
       config {
-        image   = "[[ .traefik.image]]"
-        command = "traefik"
-        args    = [
+        image           = "[[ .traefik.image]]"
+        readonly_rootfs = true
+        pids_limit      = 300
+        command         = "traefik"
+        args            = [
           "--configfile=/secrets/traefik.yml"
         ]
       }

variables.yml

@@ -6,7 +6,7 @@ instance: traefik
 traefik:
 
   # Version of Traefik
-  version: 3.0.0-rc5
+  version: 3.0.0
 
   # Docker image to use for Traefik
   image: '[[ .docker.repo ]]traefik:[[ .traefik.version ]]-1'
@@ -28,6 +28,10 @@ traefik:
       - operator: distinct_hosts
         value: true
 
+  vault:
+    policies:
+      - '[[ .instance ]][[ .consul.suffix ]]'
+
   api:
     traefik:
       auto_rule: false