--- version: "3.8" services: app: image: promasu/cryptpad:nginx networks: - proxy environment: - "CPAD_MAIN_DOMAIN=$DOMAIN" - "CPAD_SANDBOX_DOMAIN=sandbox.$DOMAIN" # Traefik can't use HTTP2 to communicate with cryptpat_websocket # A workaroung is disabling HTTP2 in Nginx - CPAD_HTTP2_DISABLE=true volumes: - cryptpad_blob:/cryptpad/blob - cryptpad_block:/cryptpad/block - cryptpad_customize:/cryptpad/customize - cryptpad_data:/cryptpad/data - cryptpad_files:/cryptpad/datastore - cryptpad_config:/cryptpad/config/ deploy: restart_policy: condition: on-failure labels: - "traefik.enable=true" - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=80" - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})" - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure" - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}" ## Redirect from EXTRA_DOMAINS to DOMAIN #- "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect" #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true" #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}" # healthcheck: # test: ["CMD", "curl", "-f", "http://localhost"] # interval: 30s # timeout: 10s # retries: 10 # start_period: 1m networks: proxy: external: true volumes: cryptpad_blob: cryptpad_block: cryptpad_customize: cryptpad_data: cryptpad_files: cryptpad_config: