99 lines
3.1 KiB
YAML
99 lines
3.1 KiB
YAML
---
|
|
version: "3.8"
|
|
|
|
services:
|
|
app:
|
|
image: "traefik:v2.5.2"
|
|
# Note(decentral1se): *please do not* add any additional ports here.
|
|
# Doing so could break new installs with port conflicts. Please use
|
|
# the usual `compose.$app.yml` approach for any additional ports
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
volumes:
|
|
- "/var/run/docker.sock:/var/run/docker.sock"
|
|
- "letsencrypt:/etc/letsencrypt"
|
|
configs:
|
|
- source: traefik_yml
|
|
target: /etc/traefik/traefik.yml
|
|
- source: file_provider_yml
|
|
target: /etc/traefik/file-provider.yml
|
|
- source: entrypoint
|
|
target: /custom-entrypoint.sh
|
|
mode: 0555
|
|
networks:
|
|
- proxy
|
|
environment:
|
|
- DASHBOARD_ENABLED
|
|
- LOG_LEVEL
|
|
healthcheck:
|
|
test: ["CMD", "traefik", "healthcheck"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 10
|
|
start_period: 1m
|
|
command: traefik
|
|
entrypoint: /custom-entrypoint.sh
|
|
deploy:
|
|
update_config:
|
|
failure_action: rollback
|
|
order: start-first
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.services.traefik.loadbalancer.server.port=web"
|
|
- "traefik.http.routers.traefik.rule=Host(`${DOMAIN}`)"
|
|
- "traefik.http.routers.traefik.entrypoints=web-secure"
|
|
- "traefik.http.routers.traefik.tls.certresolver=${LETS_ENCRYPT_ENV}"
|
|
- "traefik.http.routers.traefik.tls.options=default@file"
|
|
- "traefik.http.routers.traefik.service=api@internal"
|
|
- "traefik.http.routers.traefik.middlewares=security@file"
|
|
- "coop-cloud.${STACK_NAME}.version=1.0.0+v2.5.2"
|
|
|
|
web:
|
|
image: nginx:1.20.0
|
|
networks:
|
|
- proxy
|
|
configs:
|
|
- source: global_404
|
|
target: /usr/share/nginx/error-pages/404.html
|
|
- source: nginx_config
|
|
target: /etc/nginx/nginx.conf
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.services.error-pages-service.loadbalancer.server.port=80"
|
|
- "traefik.http.routers.error-router.rule=HostRegexp(`{host:.+}`)"
|
|
- "traefik.http.routers.error-router.entrypoints=web"
|
|
- "traefik.http.routers.error-route.priority=1"
|
|
- "traefik.http.routers.error-router.middlewares=error-pages-middleware"
|
|
- "traefik.http.middlewares.error-pages-middleware.errors.status=404"
|
|
- "traefik.http.middlewares.error-pages-middleware.errors.service=error-pages-service"
|
|
- "traefik.http.middlewares.error-pages-middleware.errors.query=/{status}.html"
|
|
|
|
networks:
|
|
proxy:
|
|
external: true
|
|
|
|
configs:
|
|
traefik_yml:
|
|
name: ${STACK_NAME}_traefik_yml_${TRAEFIK_YML_VERSION}
|
|
file: traefik.yml.tmpl
|
|
template_driver: golang
|
|
file_provider_yml:
|
|
name: ${STACK_NAME}_file_provider_yml_${FILE_PROVIDER_YML_VERSION}
|
|
file: file-provider.yml.tmpl
|
|
template_driver: golang
|
|
entrypoint:
|
|
name: ${STACK_NAME}_entrypoint_${ENTRYPOINT_VERSION}
|
|
file: entrypoint.sh.tmpl
|
|
template_driver: golang
|
|
nginx_config:
|
|
name: ${STACK_NAME}_nginx_config_${NGINX_CONFIG_VERSION}
|
|
file: nginx.conf.tmpl
|
|
template_driver: golang
|
|
global_404:
|
|
name: ${STACK_NAME}_global_404_${GLOBAL_404_VERSION}
|
|
file: 404.html
|
|
|
|
volumes:
|
|
letsencrypt:
|