From d920e833ee4c0b5993e8037c4c22b1047a09bd2f Mon Sep 17 00:00:00 2001
From: PorridgePi <kunbao2006@126.com>
Date: Sat, 3 Sep 2022 11:08:07 +0800
Subject: [PATCH] traefik: feat: Use Cloudflare API Tokens instead of API Key
 for security

---
 traefik/docker-compose.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/traefik/docker-compose.yml b/traefik/docker-compose.yml
index f54c643..f2abf5b 100644
--- a/traefik/docker-compose.yml
+++ b/traefik/docker-compose.yml
@@ -11,8 +11,10 @@ services:
     container_name: traefik
     restart: always
     environment:
-      - CF_API_EMAIL=${CF_API_EMAIL}
-      - CF_API_KEY=${CF_API_KEY}
+      # - CF_API_EMAIL=${CF_API_EMAIL} # used with CF_API_KEY
+      # - CF_API_KEY=${CF_API_KEY} # Global API Key, unsafe
+      - CF_ZONE_API_TOKEN=${CF_ZONE_API_TOKEN} # Zone / Zone / Read, scope across all zones
+      - CF_DNS_API_TOKEN=${CF_DNS_API_TOKEN} # Zone / DNS / Edit, scope to specific domain(s)
     volumes:
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
       - "./acme.json:/acme.json"