mirror of
https://github.com/nickyeoman/docker-compose-cookbooks.git
synced 2026-09-04 02:46:23 +00:00
traefik with le
This commit is contained in:
@@ -11,6 +11,9 @@ networks:
|
||||
web:
|
||||
driver: bridge
|
||||
|
||||
volumes:
|
||||
traefik:
|
||||
|
||||
services:
|
||||
|
||||
traefik:
|
||||
@@ -21,25 +24,37 @@ services:
|
||||
- --entrypoints.web.address=:80
|
||||
- --entrypoints.websecure.address=:443
|
||||
- --api
|
||||
- --providers.docker
|
||||
- "--log.level=DEBUG"
|
||||
- "--api.dashboard=true"
|
||||
- "--providers.docker=true"
|
||||
- "--providers.docker.exposedbydefault=false"
|
||||
- "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
|
||||
- "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
|
||||
- "--certificatesresolvers.letsencrypt.acme.email=social@frostybot.com"
|
||||
- "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
|
||||
ports:
|
||||
- "80:80"
|
||||
- "443:443"
|
||||
volumes:
|
||||
- "/var/run/docker.sock:/var/run/docker.sock:ro"
|
||||
- traefik:/letsencrypt
|
||||
networks:
|
||||
- web
|
||||
labels:
|
||||
# Dashboard
|
||||
- "traefik.http.routers.traefik.rule=Host(`${TRAEFIK_DOMAIN_NAME}`)"
|
||||
- "traefik.http.routers.traefik.service=api@internal"
|
||||
- "traefik.http.routers.traefik.tls.certresolver=leresolver"
|
||||
- "traefik.http.routers.traefik.tls.certresolver=letsencrypt"
|
||||
- "traefik.http.routers.traefik.entrypoints=websecure"
|
||||
- "traefik.http.routers.traefik.middlewares=dashboardauth"
|
||||
- "traefik.http.routers.traefik.middlewares=authtraefik"
|
||||
- "traefik.http.middlewares.authtraefik.basicauth.users=<USER>:<PASSWORD>"
|
||||
#- "traefik.http.middlewares.authtraefik.basicauth.users=<USER>:<PASSWORD>"
|
||||
- "traefik.http.middlewares.authtraefik.basicauth.users=nick:$$2y$$05$$XqXzcsc./tjB737OKEy8zec71XZi9Qe761cFUc71O6gLnAhG4ClU2"
|
||||
# global redirect to https
|
||||
- "traefik.http.routers.http-catchall.rule=hostregexp(`{host:.+}`)"
|
||||
- "traefik.http.routers.http-catchall.entrypoints=web"
|
||||
- "traefik.http.routers.http-catchall.middlewares=redirect-to-https"
|
||||
- "traefik.http.routers.http-catchall.middlewares=redirect-to-https@docker"
|
||||
# middleware redirect
|
||||
- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
|
||||
- "traefik.enable=true"
|
||||
|
||||
|
||||
Reference in New Issue
Block a user