From dcb3821ad142ffffb7d7851f307b2ba84689eca7 Mon Sep 17 00:00:00 2001
From: Lionel Sambuc <lionel.sambuc@gmail.com>
Date: Sat, 26 Feb 2022 11:46:44 +0100
Subject: [PATCH] Enabling Let's Encrypt for Safari 15

---
 docker-compose.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 3ec88fd..9889596 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -53,7 +53,7 @@ services:
       # Do not filter on prefix, otherwise the redirect does not work...
       - "traefik.http.routers.pi-hole.rule=Host(`${FQDN}`)"
       - "traefik.http.routers.pi-hole.tls=true"
-      # Not using Letsencrypt, as this service is not accessible from outside
-      # the LAN, and no wildcard domain certificate yet.
-      #- "traefik.http.routers.pi-hole.tls.certresolver=letsencrypt"
+      # This service is allowed only inside the LAN, but a Let's Encrypt
+      # certificate is now required for access from Safari 15
+      - "traefik.http.routers.pi-hole.tls.certresolver=letsencrypt"
       - "traefik.http.routers.pi-hole.middlewares=pi-hole,net-home@file,auth-traefik@file,pi-hole-redirect"