fix(traefik): update Traefik deployment

- Upgrade Traefik to version 2.10.4.
- Remove the unused dashboard router and disable the dashboard.
- Remove the now unsupported pilot token.

config

@@ -1 +1 @@
-Subproject commit 8f42ea727399d0fb3087eebfb4cb8c14ee73bb3f
+Subproject commit 276d7777d1de147baf5c37c3578ef8384a68c63d

magefiles/config.go

@@ -30,7 +30,6 @@ type traefikConfig struct {
 	SharedMountPoint      string `json:"sharedMountPoint"`
 	TlsHostDirectory      string `json:"tlsHostDirectory"`
 	TlsContainerDirectory string `json:"tlsContainerDirectory"`
-	PilotToken            string `json:"pilotToken"`
 }
 
 type forgejoConfig struct {

templates/traefik/Dockerfile.gotmpl

@@ -4,8 +4,6 @@ ADD traefik.yaml /flow/traefik/
 
 ADD entrypoint.sh /
 
-ADD dynamic_dashboard.yaml /tmp/
-
 RUN chmod +x /entrypoint.sh
 
 CMD ["--configfile=/flow/traefik/traefik.yaml"]

templates/traefik/dynamic_dashboard.yaml.gotmpl

@@ -1,8 +0,0 @@
----
-http:
-  routers:
-    dashboard:
-      entryPoints:
-      - "https"
-      rule: "Host(`{{ .RootDomain }}`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))"
-      service: "api@internal"

templates/traefik/entrypoint.sh.gotmpl

@@ -7,10 +7,10 @@ mkdir -p {{ .Traefik.SharedMountPoint }}/dynamic
 chgrp {{ .FlowGID }} {{ .Traefik.SharedMountPoint }}/dynamic
 chmod a-rwx,u+rwx,g+rwx {{ .Traefik.SharedMountPoint }}/dynamic
 
-# Move the dashboard config to the new directory.
+# Move any dynamic config to the new directory.
-if [ -f /tmp/dynamic_dashboard.yaml ]; then
+for f in $( find /tmp -mindepth 1 -maxdepth 1 -type f -iname '*dynamic*.yaml' -exec basename {} \; ); do
-    mv /tmp/dynamic_dashboard.yaml {{ .Traefik.SharedMountPoint }}/dynamic/dynamic_dashboard.yaml
+    mv -f /tmp/${f} {{ .Traefik.SharedMountPoint }}/dynamic/${f}
-fi
+done
 
 # first arg is `-f` or `--some-option`
 if [ "${1#-}" != "$1" ]; then

templates/traefik/traefik.yaml.gotmpl

@@ -4,7 +4,7 @@ global:
   sendAnonymousUsage: {{ .Traefik.SendAnonymousUsage }}
 api:
   insecure: false
-  dashboard: true
+  dashboard: false
   debug: false
 entryPoints:
   http:
@@ -32,5 +32,3 @@ certificatesResolvers:
       tlsChallenge: {}
 log:
   level: "{{ .Traefik.LogLevel }}"
-pilot:
-  token: "{{ .Traefik.PilotToken }}"