-
Notifications
You must be signed in to change notification settings - Fork 0
/
docker-compose.yml
64 lines (60 loc) · 2 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
#
# Dockbert "Traefik" service
#
version: '3.5'
services:
traefik:
image: 'traefik:latest'
container_name: '${DOCKBERT_CONTAINER_NAME:-dockbert-traefik}'
restart: "unless-stopped"
command:
- "--log.level=DEBUG"
- "--log.format=common"
- "--providers.docker=true"
- "--providers.docker.exposedByDefault=false"
- "--entryPoints.web.address=:80"
- "--entryPoints.websecure.address=:443"
- "--api.insecure=false"
- "--api.dashboard=true"
- "--api.debug=true"
- "--global.sendAnonymousUsage=false"
- "--pilot.dashboard=false"
- "--certificatesResolvers.myresolver.acme.email=${DOCKBERT_ACME_EMAIL}"
- "--certificatesResolvers.myresolver.acme.storage=/etc/traefik/acme/acme.json"
- "--certificatesResolvers.myresolver.acme.httpchallenge=true"
- "--certificatesResolvers.myresolver.acme.httpchallenge.entrypoint=web"
labels:
# Dashboard
- "traefik.enable=true"
- "traefik.http.routers.dashboard.rule=Host(`${DOCKBERT_DOMAIN}`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))"
- "traefik.http.routers.dashboard.entrypoints=websecure"
- "traefik.http.routers.dashboard.tls=true"
- "traefik.http.routers.dashboard.tls.certresolver=myresolver"
- "traefik.http.routers.dashboard.service=api@internal"
- "traefik.http.routers.dashboard.middlewares=auth"
- "traefik.http.middlewares.auth.basicauth.usersfile=/etc/users.passwd"
ports:
- "80:80"
- "443:443"
volumes:
- "${DOCKBERT_USERS_FILE}:/etc/users.passwd"
- "${DOCKBERT_ACME_PATH}:/etc/traefik/acme"
- "/var/run/docker.sock:/var/run/docker.sock:ro"
networks:
- dockbert-net
#
# Networks
#
# - bsf-net: Listen for the traefik edge router
#
# Command:
# docker network create dockbert-net
# docker network ls
# Output
# NETWORK ID NAME DRIVER SCOPE
# xxxxxxxxxxxx dockbert-net bridge local
#
networks:
dockbert-net:
driver: bridge
external: true