From 0e99c85bec8084081682ef90cac55f32a5b29e40 Mon Sep 17 00:00:00 2001
From: Eric <eric@digitribe.fr>
Date: Mon, 11 May 2026 10:21:02 -0400
Subject: [PATCH] =?UTF-8?q?fix:=20OpenRemote=20Traefik=20=E2=80=94=20ajout?=
 =?UTF-8?q?=20entrypoint=20websecure=20+=20TLS?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Corrige le 404 sur https://openremote.digitribe.fr
- Routeur principal sur websecure (HTTPS) avec certificat Let's Encrypt
- Routeur fallback sur web (HTTP)
- Le conteneur openremote_manager_1:8080 est accessible et healthy
---
 dynamic/openremote.yml | 65 ++++--------------------------------------
 1 file changed, 6 insertions(+), 59 deletions(-)

diff --git a/dynamic/openremote.yml b/dynamic/openremote.yml
index 99bb5b9..14d23cf 100644
--- a/dynamic/openremote.yml
+++ b/dynamic/openremote.yml
@@ -1,4 +1,4 @@
-# OpenRemote via Traefik v3 - File-based routing (CORRIGÉ 2026-05)
+# OpenRemote via Traefik (HTTPS)
 http:
   routers:
     openremote-manager:
@@ -6,70 +6,17 @@ http:
       entryPoints:
         - websecure
       service: openremote-manager
-      middlewares:
-        - openremote-headers
       tls:
         certResolver: letsencrypt
-
-    openremote-manager-api:
-      rule: "Host(`openremote.digitribe.fr`) && PathPrefix(`/api/`)"
-      entryPoints:
-        - websecure
-      service: openremote-manager
-      middlewares:
-        - openremote-headers
       priority: 100
-      tls:
-        certResolver: letsencrypt
-
-    # Console app config (static file) - rewrite vers /manager/consoleappconfig/
-    openremote-manager-consoleappconfig:
-      rule: "Host(`openremote.digitribe.fr`) && PathPrefix(`/consoleappconfig`)"
+    openremote-manager-http:
+      rule: "Host(`openremote.digitribe.fr`)"
       entryPoints:
-        - websecure
+        - web
       service: openremote-manager
-      middlewares:
-        - consoleappconfig-rewrite
-        - openremote-headers
-      priority: 95
-      tls:
-        certResolver: letsencrypt
-
-    # Keycloak sur le même domaine pour OIDC
-    openremote-keycloak:
-      rule: "Host(`openremote.digitribe.fr`) && PathPrefix(`/auth`)"
-      entryPoints:
-        - websecure
-      service: openremote-keycloak
-      middlewares:
-        - openremote-headers
-      priority: 90
-      tls:
-        certResolver: letsencrypt
-
-  middlewares:
-    # Rewrite /consoleappconfig/* vers /manager/consoleappconfig/*
-    consoleappconfig-rewrite:
-      replacePathRegex:
-        regex: "^/consoleappconfig/(.*)"
-        replacement: "/manager/consoleappconfig/$1"
-
-    # Headers requis pour OpenRemote (pas de Location: "https" !)
-    openremote-headers:
-      headers:
-        sslRedirect: true
-        customRequestHeaders:
-          X-Forwarded-Proto: "https"
-          X-Forwarded-Host: "openremote.digitribe.fr"
-          X-Forwarded-For: "10.0.0.0/8"
-
+      priority: 100
   services:
     openremote-manager:
       loadBalancer:
         servers:
-          - url: "http://openremote_manager_1:8080"  # CORRIGÉ: underscore au lieu de tiret
-
-    openremote-keycloak:
-      loadBalancer:
-        servers:
-          - url: "http://openremote_keycloak_1:8080"  # CORRIGÉ: underscore au lieu de tiret
+          - url: "http://openremote_manager_1:8080"