64 lines
2.0 KiB
Plaintext
64 lines
2.0 KiB
Plaintext
---
|
|
version: "3.7"
|
|
|
|
services:
|
|
traefik:
|
|
image: "{{ $.TRAEFIK_IMAGE }}"
|
|
command:
|
|
- --entrypoints.http.address=:80
|
|
{{ if $.TRAEFIK_LETSENCRYPT_EMAIL }}
|
|
- --entrypoints.https.address=:443
|
|
{{ end }}
|
|
- --providers.docker
|
|
- --api={{ $.TRAEFIK_API_ENABLED }}
|
|
- --api.dashboard={{ $.TRAEFIK_DASHBOARD_ENABLED }}
|
|
|
|
- --log.level={{ $.TRAEFIK_LOG_LEVEL }}
|
|
- --log.format=json
|
|
|
|
{{ if $.TRAEFIK_LETSENCRYPT_EMAIL }}
|
|
- --certificatesresolvers.leresolver.acme.caserver={{ $.TRAEFIK_LETSENCRYPT_SERVER }}
|
|
- --certificatesresolvers.leresolver.acme.email={{ $.TRAEFIK_LETSENCRYPT_EMAIL }}
|
|
- --certificatesresolvers.leresolver.acme.storage=/acme.json
|
|
- --certificatesresolvers.leresolver.acme.tlschallenge=true
|
|
{{ end }}
|
|
|
|
labels:
|
|
{{ if $.TRAEFIK_API_ENABLED }}
|
|
# Dashboard
|
|
- "traefik.http.routers.api.rule=Host(`{{ $.TRAEFIK_API_VHOST }}`)"
|
|
- "traefik.http.routers.api.service=api@internal"
|
|
- "traefik.http.routers.api.entrypoints={{ if $.TRAEFIK_LETSENCRYPT_EMAIL }}https{{ else }}http{{ end }}"
|
|
{{ end }}
|
|
|
|
- "traefik.http.routers.api.middlewares=auth"
|
|
{{ if $.TRAEFIK_BASIC_AUTH }}
|
|
- "traefik.http.middlewares.auth.basicauth.users={{ $.TRAEFIK_BASIC_AUTH }}"
|
|
{{ end }}
|
|
|
|
{{ if $.TRAEFIK_LETSENCRYPT_EMAIL }}
|
|
- "traefik.http.routers.api.tls.certresolver=leresolver"
|
|
|
|
# global redirect to https
|
|
- "traefik.http.routers.http-catchall.rule=hostregexp(`{host:.+}`)"
|
|
- "traefik.http.routers.http-catchall.entrypoints=http"
|
|
- "traefik.http.routers.http-catchall.middlewares=redirect-to-https"
|
|
|
|
# middleware redirect
|
|
- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
|
|
{{ end }}
|
|
|
|
network_mode: bridge
|
|
|
|
ports:
|
|
- "80:80"
|
|
{{ if $.TRAEFIK_LETSENCRYPT_EMAIL }}
|
|
- "443:443"
|
|
{{ end }}
|
|
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
- "/var/run/docker.sock:/var/run/docker.sock:ro"
|
|
- "{{ $.TRAEFIK_DATA_DIR }}/traefik-acme.json:/acme.json"
|