hcornet
535e976db1
Some checks are pending
Deployment Verification / deploy-and-test (push) Waiting to run
128 lines
3.8 KiB
YAML
128 lines
3.8 KiB
YAML
### networks
|
|
networks:
|
|
back_network:
|
|
driver: bridge
|
|
attachable: true
|
|
front_network:
|
|
driver: bridge
|
|
attachable: true
|
|
|
|
### Volumes
|
|
#volumes:
|
|
# traefik-logs:
|
|
|
|
### services
|
|
services:
|
|
# traefik
|
|
traefik:
|
|
container_name: traefik-app
|
|
hostname: traefik-app
|
|
image: traefik:latest
|
|
restart: always
|
|
ports:
|
|
# - "22:22"
|
|
- "80:80"
|
|
- "443:443"
|
|
- "8181:8181"
|
|
volumes:
|
|
- "/var/run/docker.sock:/var/run/docker.sock:ro"
|
|
- "/etc/localtime:/etc/localtime:ro"
|
|
- "./configs/traefik.yml:/etc/traefik/traefik.yml"
|
|
- "./configs/dynamic:/etc/traefik/dynamic:rw"
|
|
# - "./certificates/acme.json:/etc/traefik/acme/acme.json:rw"
|
|
- "./certificates:/var/traefik/certs:rw"
|
|
- "./certificates:/etc/traefik/ssl:rw"
|
|
- "./logs:/var/log/traefik:rw"
|
|
environment:
|
|
- CF_DNS_API_TOKEN=${CF_DNS_API_TOKEN}
|
|
- CLOUDFLARE_DNS_API_TOKEN_FILE=/run/secrets/cf_token
|
|
- CLOUDFLARE_HTTP_TIMEOUT=${HTTP_TIMEOUT}
|
|
- CLOUDFLARE_POLLING_INTERVAL=${POLLING_INTERVAL}
|
|
- CLOUDFLARE_PROPAGATION_TIMEOUT=${PROPAGATION_TIMEOUT}
|
|
- CLOUDFLARE_TTL=${TTL}
|
|
# Swarm config
|
|
# deploy:
|
|
# restart_policy:
|
|
# condition: any
|
|
# delay: 5s
|
|
# max_attempts: 3
|
|
# window: 120s
|
|
# update_config:
|
|
# delay: 10s
|
|
# order: start-first
|
|
# parallelism: 1
|
|
# rollback_config:
|
|
# parallelism: 0
|
|
# order: stop-first
|
|
# placement:
|
|
# constraints:
|
|
# - node.role == manager
|
|
networks:
|
|
- back_network
|
|
- front_network
|
|
|
|
### Certificats
|
|
certificat:
|
|
container_name: traefik-certificat
|
|
hostname: traefik-certificat
|
|
image: alpine:latest
|
|
command: sh -c "cd /etc/traefik/ssl
|
|
&& wget traefik.me/cert.pem -O cert2.pem
|
|
&& wget traefik.me/privkey.pem -O privkey2.pem"
|
|
volumes:
|
|
- "./certificates:/etc/traefik/ssl"
|
|
networks:
|
|
- front_network
|
|
|
|
### whoami-externe
|
|
whoami-externe:
|
|
container_name: traefik-whoami-externe
|
|
hostname: traefik-whoami-externe
|
|
image: traefik/whoami:latest
|
|
command:
|
|
- --name=externe
|
|
restart: unless-stopped
|
|
networks:
|
|
- front_network
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=front_network"
|
|
# HTTP
|
|
- "traefik.http.routers.whoami-externe-http.rule=Host(`whoami-externe.tips-of-mine.com`)"
|
|
- "traefik.http.routers.whoami-externe-http.entrypoints=http"
|
|
# HTTPS
|
|
- "traefik.http.routers.whoami-externe-https.rule=Host(`whoami-externe.tips-of-mine.com`)"
|
|
- "traefik.http.routers.whoami-externe-https.entrypoints=https"
|
|
- "traefik.http.routers.whoami-externe-https.tls=true"
|
|
- "traefik.http.routers.whoami-externe-https.service=whoami-externe-service"
|
|
# Middleware
|
|
- "traefik.http.routers.whoami-externe-https.middlewares=forward-auth"
|
|
# Service
|
|
- "traefik.http.services.whoami-externe-service.loadbalancer.server.port=80"
|
|
|
|
### whoami-interne
|
|
whoami-interne:
|
|
container_name: traefik-whoami-interne
|
|
hostname: traefik-whoami-interne
|
|
image: traefik/whoami:latest
|
|
command:
|
|
- --name=interne
|
|
restart: unless-stopped
|
|
networks:
|
|
- front_network
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=front_network"
|
|
# HTTP
|
|
- "traefik.http.routers.whoami-interne-http.rule=Host(`whoami-interne.tips-of-mine.com`)"
|
|
- "traefik.http.routers.whoami-interne-http.entrypoints=http"
|
|
# HTTPS
|
|
- "traefik.http.routers.whoami-interne-https.rule=Host(`whoami-interne.tips-of-mine.com`)"
|
|
- "traefik.http.routers.whoami-interne-https.entrypoints=https"
|
|
- "traefik.http.routers.whoami-interne-https.tls=true"
|
|
- "traefik.http.routers.whoami-interne-https.service=whoami-interne-service"
|
|
# Middleware
|
|
# Service
|
|
- "traefik.http.services.whoami-interne-service.loadbalancer.server.port=80"
|
|
|