Adds support for .deb package builder in Traefik

[robertoberto]

Implements a Dockerfile and adjusts the Makefile for automated .deb package building in Traefik

This commit introduces a Dockerfile configured for Ubuntu 24, enhancing the environment setup and handling of environment variables for the automated construction of .deb packages. Significant improvements and additions include:

• Integration of logrotate to manage log files.
• Provision of a traefik.yml example that redirects traffic from port 80 to 8000.
• Installation instructions for setting up Traefik as a standalone service on Ubuntu without Docker.
• Implementation of a systemd service configuration for robust service management, featuring:
  • Running as user www-data to enhance security.
  • AmbientCapabilities=CAP_NET_BIND_SERVICE to allow binding to well-known ports without elevated privileges.
  • Restart=always to ensure the service restarts automatically if it crashes.
  • Enhanced filesystem and service isolation with ProtectSystem=strict, PrivateTmp=true, ProtectHome=true, PrivateDevices=true, ProtectKernelTunables=true, ProtectControlGroups=true.
  • Specified ReadWritePaths=/etc/traefik/acme.json /var/log/traefik/ to restrict read-write permissions to essential paths.
• Configuration to run Traefik under the www-data user for improved security and compliance.

These enhancements are aimed at solidifying Traefik's deployment as a secure and reliable reverse proxy and load balancer on Ubuntu systems.

Can be enhanced to support other debian and ubuntu releases.

[ldez]

Hello,

Due to the maintenance, I think it would be better to use a dedicated repository inside the contributor organization https://github.com/traefik-contrib

The organization already has the Snap https://github.com/traefik-contrib/traefik-snap

@robertoberto if you agree, I will set up a repository and invite you to this organization.

[robertoberto]

Hi Ludovic, sure please create repo I am thinking in create an apt repo for ubuntu 22 and 24, also debian 12 I can automate build for new traefik tags and generate and publish apt repos traefik-repos should be a good name

…

On Sat, 11 May 2024 at 19:59 Ludovic Fernandez ***@***.***> wrote: Hello, Due to the maintenance, I think it would be better to use a dedicated repository inside the contributor organization https://github.com/traefik-contrib The organization already has the Snap https://github.com/traefik-contrib/traefik-snap @robertoberto <https://github.com/robertoberto> if you agree, I will set up a repository and invite you to this organization. — Reply to this email directly, view it on GitHub <#10713 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AADRD5IPTRN6VWUW4GTZCM3ZB2PERAVCNFSM6AAAAABHSITUHWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCMBWGA2TCMZXGE> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[ldez]

traefik-repos is too generic, I created https://github.com/traefik-contrib/traefik-apt

I sent you an invitation.

[ldez]

We can continue the discussion here if you want

[robertoberto]

great name!

…

On Sat, 11 May 2024 at 21:56 Ludovic Fernandez ***@***.***> wrote: traefik-repos is too generic, I created https://github.com/traefik-contrib/traefik-apt — Reply to this email directly, view it on GitHub <#10713 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AADRD5PR7PNICTG7HCFPV63ZB244DAVCNFSM6AAAAABHSITUHWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCMBWGA3TKNBWGM> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[ldez]

The packages builder is now inside https://github.com/traefik-contrib/traefik-apt

So we can close this PR.

Thank you @robertoberto

[emilevauge]

Hello @robertoberto & @ldez, we need to discuss this topic with the maintainers team as the https://github.com/traefik-contrib organization isn't offially maintained by the project team.
We will get back to you ASAP.