rauthy/compose.yml
2025-06-10 12:17:17 +02:00

57 lines
1.3 KiB
YAML

---
version: "3.13"
services:
app:
image: ghcr.io/sebadob/rauthy:0.29.4
environment:
- ADMIN_EMAIL
- ADMIN_FORCE_MFA
- DOMAIN
- ENC_KEY_ACTIVE
configs:
- source: rauthy_cfg
target: /app/rauthy.cfg
secrets:
- enc_keys
- hql_api
- hql_raft
volumes:
- data:/app/data
networks:
- proxy
deploy:
restart_policy:
condition: on-failure
labels:
- "traefik.enable=true"
- "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=8080"
- "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`)"
- "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
- "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
- "coop-cloud.${STACK_NAME}.version=0.2.1+0.29.4"
networks:
proxy:
external: true
configs:
rauthy_cfg:
name: ${STACK_NAME}_rauthy_cfg_${RAUTHY_CFG_VERSION}
file: rauthy.cfg.tmpl
template_driver: golang
secrets:
enc_keys:
name: ${STACK_NAME}_enc_keys_${SECRET_ENC_KEYS_VERSION}
external: true
hql_raft:
name: ${STACK_NAME}_hql_raft_${SECRET_HQL_RAFT_VERSION}
external: true
hql_api:
name: ${STACK_NAME}_hql_api_${SECRET_HQL_API_VERSION}
external: true
volumes:
data: