Compare commits
3 Commits
4f46fdcdea
...
4d4a578b78
Author | SHA1 | Date | |
---|---|---|---|
4d4a578b78 | |||
39dbe048f5 | |||
310c237add |
4
.gitignore
vendored
4
.gitignore
vendored
@ -1,2 +1,2 @@
|
|||||||
.env
|
/.env
|
||||||
le-certs.json
|
/certs.json
|
||||||
|
@ -1,3 +1,4 @@
|
|||||||
|
---
|
||||||
version: "3"
|
version: "3"
|
||||||
|
|
||||||
services:
|
services:
|
||||||
@ -11,11 +12,11 @@ services:
|
|||||||
# enable Træfik dashboard
|
# enable Træfik dashboard
|
||||||
- --api.dashboard=true
|
- --api.dashboard=true
|
||||||
# configure Let's Encrypt automatic certificates
|
# configure Let's Encrypt automatic certificates
|
||||||
- --certificatesresolvers.letsencrypt.acme.dnschallenge=true
|
- --certificatesresolvers.${TRAEFIK_CERTRESOLVER}.acme.dnschallenge=true
|
||||||
- --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=hetzner
|
- --certificatesresolvers.${TRAEFIK_CERTRESOLVER}.acme.dnschallenge.provider=hetzner
|
||||||
- --certificatesresolvers.letsencrypt.acme.email=${LETSENCRYPT_EMAIL}
|
- --certificatesresolvers.${TRAEFIK_CERTRESOLVER}.acme.email=${LETSENCRYPT_EMAIL}
|
||||||
- --certificatesresolvers.letsencrypt.acme.keytype=RSA4096
|
- --certificatesresolvers.${TRAEFIK_CERTRESOLVER}.acme.keytype=RSA4096
|
||||||
- --certificatesresolvers.letsencrypt.acme.storage=/le-certs.json
|
- --certificatesresolvers.${TRAEFIK_CERTRESOLVER}.acme.storage=/certs.json
|
||||||
# we listen on both HTTP and HTTPS
|
# we listen on both HTTP and HTTPS
|
||||||
- --entrypoints.http.address=:80
|
- --entrypoints.http.address=:80
|
||||||
- --entrypoints.https.address=:443
|
- --entrypoints.https.address=:443
|
||||||
@ -35,7 +36,7 @@ services:
|
|||||||
- HETZNER_API_KEY=${HETZNER_API_KEY}
|
- HETZNER_API_KEY=${HETZNER_API_KEY}
|
||||||
labels:
|
labels:
|
||||||
# expose Træfik using Træfik (dashboard)
|
# expose Træfik using Træfik (dashboard)
|
||||||
- traefik.enable=true
|
- traefik.enable=${TRAEFIK_ENABLED}
|
||||||
# configure a global whitelist for my home
|
# configure a global whitelist for my home
|
||||||
- traefik.http.middlewares.dashboard-whitelist.ipwhitelist.sourcerange=${TRAEFIK_DASHBOARD_WHITELIST}
|
- traefik.http.middlewares.dashboard-whitelist.ipwhitelist.sourcerange=${TRAEFIK_DASHBOARD_WHITELIST}
|
||||||
# configure the global redirect middleware
|
# configure the global redirect middleware
|
||||||
@ -57,8 +58,8 @@ services:
|
|||||||
- traefik.http.routers.https-${TRAEFIK_ROUTER}.rule=Host(`${TRAEFIK_MATCHRULE}`)
|
- traefik.http.routers.https-${TRAEFIK_ROUTER}.rule=Host(`${TRAEFIK_MATCHRULE}`)
|
||||||
- traefik.http.routers.https-${TRAEFIK_ROUTER}.service=api@internal
|
- traefik.http.routers.https-${TRAEFIK_ROUTER}.service=api@internal
|
||||||
# of course, enable TLS and it's certificate provider
|
# of course, enable TLS and it's certificate provider
|
||||||
- traefik.http.routers.https-${TRAEFIK_ROUTER}.tls=true
|
- traefik.http.routers.https-${TRAEFIK_ROUTER}.tls=${TRAEFIK_TLSENABLED}
|
||||||
- traefik.http.routers.https-${TRAEFIK_ROUTER}.tls.certresolver=letsencrypt
|
- traefik.http.routers.https-${TRAEFIK_ROUTER}.tls.certresolver=${TRAEFIK_CERTRESOLVER}
|
||||||
networks:
|
networks:
|
||||||
- traefik
|
- traefik
|
||||||
ports:
|
ports:
|
||||||
@ -67,7 +68,7 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||||
- ./config:/config:ro
|
- ./config:/config:ro
|
||||||
- ./le-certs.json:/le-certs.json
|
- ./certs.json:/certs.json
|
||||||
|
|
||||||
networks:
|
networks:
|
||||||
traefik:
|
traefik:
|
||||||
|
@ -1,10 +1,14 @@
|
|||||||
|
# General environment
|
||||||
TRAEFIK_VERSION=2.4
|
TRAEFIK_VERSION=2.4
|
||||||
|
TRAEFIK_CERTRESOLVER=letsencrypt
|
||||||
TRAEFIK_CONTAINER_NAME=traefik.mydomain.com
|
TRAEFIK_CONTAINER_NAME=traefik.mydomain.com
|
||||||
|
TRAEFIK_DASHBOARD_WHITELIST=1.2.3.4/24
|
||||||
|
TRAEFIK_ENABLED=true
|
||||||
|
TRAEFIK_NETWORK=traefik
|
||||||
TRAEFIK_MATCHRULE=traefik.mydomain.com
|
TRAEFIK_MATCHRULE=traefik.mydomain.com
|
||||||
TRAEFIK_ROUTER=traefik_mydomain_com
|
TRAEFIK_ROUTER=traefik_mydomain_com
|
||||||
TRAEFIK_NETWORK=traefik-proxy
|
|
||||||
TRAEFIK_PILOT_TOKEN=
|
TRAEFIK_PILOT_TOKEN=
|
||||||
TRAEFIK_DASHBOARD_WHITELIST=1.2.3.4/24
|
TRAEFIK_TLSENABLED=true
|
||||||
|
|
||||||
# Certificate provider
|
# Certificate provider
|
||||||
HETZNER_API_KEY=
|
HETZNER_API_KEY=
|
||||||
|
Loading…
Reference in New Issue
Block a user