75 lines
2.1 KiB
Django/Jinja
75 lines
2.1 KiB
Django/Jinja
---
|
|
version: "3"
|
|
services:
|
|
traefik:
|
|
container_name: traefik
|
|
image: traefik:1.7
|
|
command:
|
|
- "--api"
|
|
- "--entryPoints=Name:http Address::80 Redirect.EntryPoint:https"
|
|
- "--entryPoints=Name:https Address::443 TLS"
|
|
- "--defaultentrypoints=http,https"
|
|
- "--acme"
|
|
- "--acme.storage=/etc/traefik/acme/acme.json"
|
|
- "--acme.entryPoint=https"
|
|
- "--acme.httpChallenge.entryPoint=http"
|
|
- "--acme.caServer=https://acme-v02.api.letsencrypt.org/directory"
|
|
- "--acme.onHostRule=true"
|
|
- "--acme.onDemand=false"
|
|
- "--acme.email=kleinmaddin@googlemail.com"
|
|
- "--acme.acmelogging=true"
|
|
- "--docker"
|
|
# - "--docker.watch"
|
|
- "--logLevel=INFO"
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- /etc/traefik/acme/acme.json:/etc/traefik/acme/acme.json
|
|
- /etc/traefik:/etc/traefik
|
|
- ./logs:/var/log/traefik
|
|
networks:
|
|
- traefik
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
labels:
|
|
traefik.frontend.rule: "Host:traefik.eichner.cc"
|
|
traefik.port: "8080"
|
|
traefik.frontend.auth.forward.address: "http://89.58.15.160:5252"
|
|
traefik.frontend.auth.forward.authResponseHeaders: "cookie"
|
|
traefik.backend: "traefik"
|
|
traefik.frontend.entryPoints: "https"
|
|
# traefik.frontend.auth.basic.users: "admin:$$apr1$S0AMFtfZ$yMnkgnpJzsG3JRAO2EXQ1/"
|
|
traefik.frontend.auth.basic.usersFile: "/etc/traefik/.htpasswd"
|
|
restart: unless-stopped
|
|
|
|
networks:
|
|
traefik:
|
|
external:
|
|
name: traefik
|
|
|
|
|
|
root@eichner:/opt/docker# cat vaultwarden/docker-compose.yml
|
|
version: '3'
|
|
|
|
services:
|
|
bitwarden:
|
|
container_name: bitwarden
|
|
image: vaultwarden/server:latest
|
|
env_file: .env
|
|
networks:
|
|
- traefik
|
|
labels:
|
|
- "traefik.frontend.rule=Host:vault.eichner.cc"
|
|
- "traefik.port=80"
|
|
- "traefik.backend=bitwarden"
|
|
- "traefik.frontend.entryPoints=https"
|
|
volumes:
|
|
- "/var/run/docker.sock:/var/run/docker.sock"
|
|
- "./data:/data"
|
|
restart: unless-stopped
|
|
|
|
networks:
|
|
traefik:
|
|
external:
|
|
name: traefik
|