38 lines
1.3 KiB
YAML
38 lines
1.3 KiB
YAML
name: ingress
|
|
|
|
services:
|
|
traefik:
|
|
image: traefik:latest
|
|
restart: unless-stopped
|
|
networks:
|
|
- default
|
|
- expose
|
|
command:
|
|
- "--providers.docker=true"
|
|
- "--providers.docker.exposedbydefault=false"
|
|
- "--providers.docker.network=expose"
|
|
- "--entrypoints.web.address=:80"
|
|
- "--entrypoints.web.http.redirections.entrypoint.to=websecure"
|
|
- "--entrypoints.websecure.address=:443"
|
|
- "--entrypoints.websecure.http.tls=true"
|
|
- "--entrypoints.websecure.http.tls.certresolver=letsencrypt"
|
|
- "--certificatesresolvers.letsencrypt.acme.email=acme@lanhuip.com"
|
|
- "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
|
|
- "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
|
|
- "--api.dashboard=true"
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.dashboard.rule=Host(`$TRAEFIK_DOMAIN`)"
|
|
- "traefik.http.routers.dashboard.service=api@internal"
|
|
- "traefik.http.routers.dashboard.middlewares=basicauth"
|
|
- "traefik.http.middlewares.basicauth.basicauth.users=$TRAEFIK_USERNAME:$TRAEFIK_PASSWORD"
|
|
ports:
|
|
- 80:80
|
|
- 443:443
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
|
|
networks:
|
|
expose:
|
|
external: true
|