Support HTTP3

ansible/host_vars/grimes/main.yml

@@ -1,4 +1,6 @@
 private_ip: "{{ ansible_tailscale0.ipv4.address }}"
 
+traefik_http3: true
+
 restic_backup_locations:
   - /opt

ansible/roles/traefik/defaults/main.yml

@@ -3,3 +3,4 @@ traefik_provider_homeassistant: false
 traefik_provider_grafana: false
 traefik_provider_uptime_kuma: false
 traefik_tls_challenge: false
+traefik_http3: false

ansible/roles/traefik/files/docker-compose.yml

@@ -10,6 +10,7 @@ services:
     ports:
       - 80:80
       - 443:443
+      - 443:443/udp
       - "{{ private_ip }}:8080:8080"
     depends_on:
       - docker_proxy

ansible/roles/traefik/files/traefik.yml

@@ -40,6 +40,9 @@ entryPoints:
     transport:
       respondingTimeouts:
         readTimeout: 180s
+    {% if traefik_http3 %}
+    http3: {}
+    {% end %}
   traefik:
     address: :8080
 

terraform/hetzner_firewall.tf

@@ -49,4 +49,15 @@ resource "hcloud_firewall" "web" {
       "::/0"
     ]
   }
+
+  # HTTP/3
+  rule {
+    direction = "in"
+    protocol  = "udp"
+    port      = "443"
+    source_ips = [
+      "0.0.0.0/0",
+      "::/0"
+    ]
+  }
 }