初始提交

.env.example

@@ -0,0 +1,3 @@
+TRAEFIK_DOMAIN=ingress.docker.localhost
+TRAEFIK_USERNAME=traefik
+TRAEFIK_PASSWORD=$2a$12$h/QqemPee.5YkVGlLWb/cO4urRmM7ANL4rsie12Kl7Ki4np8LHQa6

.gitignore

@@ -0,0 +1 @@
+.env

README

@@ -0,0 +1 @@
+这里是本机 http 网关容器的配置目录，使用了 traefik 作为网关组件，可以自动化证书申请与更新

docker-compose.yaml

@@ -0,0 +1,37 @@
+name: ingress
+
+services:
+  traefik:
+    image: traefik:latest
+    restart: unless-stopped
+    networks:
+      - default
+      - expose
+    command:
+      - "--providers.docker=true"
+      - "--providers.docker.exposedbydefault=false"
+      - "--providers.docker.network=expose"
+      - "--entrypoints.web.address=:80"
+      - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
+      - "--entrypoints.websecure.address=:443"
+      - "--entrypoints.websecure.http.tls=true"
+      - "--entrypoints.websecure.http.tls.certresolver=letsencrypt"
+      - "--certificatesresolvers.letsencrypt.acme.email=acme@lanhuip.com"
+      - "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
+      - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
+      - "--api.dashboard=true"
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.dashboard.rule=Host(`$TRAEFIK_DOMAIN`)"
+      - "traefik.http.routers.dashboard.service=api@internal"
+      - "traefik.http.routers.dashboard.middlewares=basicauth"
+      - "traefik.http.middlewares.basicauth.basicauth.users=$TRAEFIK_USERNAME:$TRAEFIK_PASSWORD"
+    ports:
+      - 80:80
+      - 443:443
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+
+networks:
+  expose:
+    external: true