feat: new endpoint on port 8443

templates/inverseproxy.yaml.j2

@@ -46,9 +46,17 @@ services:
             - "0.0.0.0:80:80/tcp"
             - "0.0.0.0:443:443/tcp"
             - "0.0.0.0:443:443/udp"
+{% if inventory_hostname in groups['maintenance_contract'] %}
+            - "0.0.0.0:8443:8443/tcp"
+            - "0.0.0.0:8443:8443/udp"
+{% endif %}
             - "[::]:80:80/tcp"
             - "[::]:443:443/tcp"
             - "[::]:443:443/udp"
+{% if inventory_hostname in groups['maintenance_contract'] %}
+            - "[::]:8443:8443/tcp"
+            - "[::]:8443:8443/udp"
+{% endif %}
         depends_on:
             - dockersocket
         restart: unless-stopped

templates/traefik.toml.j2

@@ -17,6 +17,16 @@
     [entryPoints.websecure.http3]
       advertisedPort = 443
 
+  [entryPoints.websecure_updater]
+    address = ":8443"
+    [entryPoints.websecure_updater.http]
+      middlewares = ["security-headers@file"{% if inventory_hostname not in groups.docker_tuleap | default([]) %}, "limit@file"{% endif %}, "compression@file"]
+      [entryPoints.websecure_updater.http.tls]
+        options = "default"
+        certResolver = "le"
+    [entryPoints.websecure_updater.http3]
+      advertisedPort = 8443
+
 [providers]
   [providers.docker]
     endpoint = "http://dockersocket:2375"