deployments/nextcloud
0
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Compare commits

base: deployments:a435eae93ddacaf5a2ff6690782b83c869768a7e
Branches Tags
deployments:production
deployments:1.0.0
...
compare: deployments:6abe5551003c0b1f405fa8c61db05968e1845819
Branches Tags
deployments:production
deployments:1.0.0

2 Commits
a435eae93d ... 6abe555100

Author SHA1 Message Date
Bryan Joshua Pedini
6abe555100 added hsts middleware for enhanced security 2022-08-16 16:05:15 +02:00
Bryan Joshua Pedini
6a5f9fb8eb reordered Træfik labels 2022-08-16 16:04:55 +02:00
1 changed files with 5 additions and 5 deletions
Show Stats Expand all files Collapse all files

10
docker-compose.yml
View File

@ -14,6 +14,10 @@ services:
labels: labels:
- traefik.enable=${TRAEFIK_ENABLED} - traefik.enable=${TRAEFIK_ENABLED}
- traefik.docker.network=${TRAEFIK_NETWORK} - traefik.docker.network=${TRAEFIK_NETWORK}
# specify a custom middleware for nextcloud-specific configuration
- traefik.http.middlewares.nextcloud-redirectregex.redirectRegex.permanent=true
- traefik.http.middlewares.nextcloud-redirectregex.redirectRegex.regex="https://(.*)/.well-known/(card|cal)dav"
- traefik.http.middlewares.nextcloud-redirectregex.redirectRegex.replacement="https://$${1}/remote.php/dav/"
### Section HTTP ### Section HTTP
- traefik.http.routers.http-${TRAEFIK_ROUTER}.entrypoints=http - traefik.http.routers.http-${TRAEFIK_ROUTER}.entrypoints=http
# redirect to HTTPS only # redirect to HTTPS only
@ -22,17 +26,13 @@ services:
### Section HTTPS ### Section HTTPS
- traefik.http.routers.https-${TRAEFIK_ROUTER}.entrypoints=https - traefik.http.routers.https-${TRAEFIK_ROUTER}.entrypoints=https
# configure the exposed service # configure the exposed service
- traefik.http.routers.https-${TRAEFIK_ROUTER}.middlewares=hsts,nextcloud-redirectregex
- traefik.http.routers.https-${TRAEFIK_ROUTER}.rule=Host(`${TRAEFIK_MATCHRULE}`) - traefik.http.routers.https-${TRAEFIK_ROUTER}.rule=Host(`${TRAEFIK_MATCHRULE}`)
# of course, enable TLS and it's certificate provider # of course, enable TLS and it's certificate provider
- traefik.http.routers.https-${TRAEFIK_ROUTER}.tls=${TRAEFIK_TLSENABLED} - traefik.http.routers.https-${TRAEFIK_ROUTER}.tls=${TRAEFIK_TLSENABLED}
- traefik.http.routers.https-${TRAEFIK_ROUTER}.tls.certresolver=${TRAEFIK_CERTRESOLVER} - traefik.http.routers.https-${TRAEFIK_ROUTER}.tls.certresolver=${TRAEFIK_CERTRESOLVER}
# specify a service so a custom port can be used # specify a service so a custom port can be used
- traefik.http.services.${TRAEFIK_SERVICE}.loadbalancer.server.port=${TRAEFIK_SERVICE_PORT} - traefik.http.services.${TRAEFIK_SERVICE}.loadbalancer.server.port=${TRAEFIK_SERVICE_PORT}
# specify a custom middleware for nextcloud-specific configuration
- traefik.http.middlewares.nextcloud-redirectregex.redirectRegex.permanent=true
- traefik.http.middlewares.nextcloud-redirectregex.redirectRegex.regex="https://(.*)/.well-known/(card|cal)dav"
- traefik.http.middlewares.nextcloud-redirectregex.redirectRegex.replacement="https://$${1}/remote.php/dav/"
- traefik.http.routers.https-${TRAEFIK_ROUTER}.middlewares=nextcloud-redirectregex
networks: networks:
- internal - internal
- traefik - traefik