variables for traefik

This commit is contained in:
admin 2026-01-30 14:13:29 -07:00
parent 8a6f22549d
commit 8a42cb3bb9

View file

@ -9,39 +9,34 @@ services:
mem_limit: "1024m" mem_limit: "1024m"
mem_reservation: "128m" mem_reservation: "128m"
restart: always restart: always
#ports:
# - "80:80" # HTTP
# - "443:443" # HTTPS
# - "888:8080" # Traefik Dashboard (optional, password-protect in production!)
command: command:
- "--api.dashboard=true" - "--api.dashboard=true"
- "--api.insecure=true" # Remove or secure in prod - "--api.insecure=true"
- "--providers.docker=true" - "--providers.docker=true"
- "--providers.docker.exposedbydefault=false" - "--providers.docker.exposedbydefault=false"
- "--providers.docker.useBindPortIP=false" - "--providers.docker.useBindPortIP=false"
- "--entrypoints.web.address=:80" - "--entrypoints.web.address=:80"
- "--entrypoints.websecure.address=:443" - "--entrypoints.websecure.address=:443"
- "--providers.docker.network=${DOCKER_NETWORK_LIST}" # Variables for flexibility
- "--providers.docker.network=${DOCKER_NETWORKS}"
- "--providers.file.directory=/etc/traefik/dynamic" - "--providers.file.directory=/etc/traefik/dynamic"
- "--providers.file.watch=true" - "--providers.file.watch=true"
##DNS resolver ## DNS resolver
- "--certificatesresolvers.myresolver.acme.dnschallenge=true" - "--certificatesresolvers.dns_resolver.acme.dnschallenge=true"
- "--certificatesresolvers.myresolver.acme.dnschallenge.provider=desec" - "--certificatesresolvers.dns_resolver.acme.dnschallenge.provider=desec"
- "--certificatesresolvers.myresolver.acme.dnschallenge.delaybeforecheck=90" - "--certificatesresolvers.dns_resolver.acme.dnschallenge.delaybeforecheck=90"
- --certificatesresolvers.myresolver.acme.dnschallenge.resolvers=1.1.1.1:53,8.8.8.8:53 - "--certificatesresolvers.dns_resolver.acme.dnschallenge.resolvers=1.1.1.1:53,8.8.8.8:53"
- "--certificatesresolvers.myresolver.acme.email=admin@mapletree.email" - "--certificatesresolvers.dns_resolver.acme.email=${ACME_EMAIL}"
- "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json" - "--certificatesresolvers.dns_resolver.acme.storage=/letsencrypt/acme.json"
##HTTP resolver ## HTTP Resolver
- --certificatesresolvers.le_http.acme.httpchallenge=true - "--certificatesresolvers.http_resolver.acme.httpchallenge=true"
- --certificatesresolvers.le_http.acme.httpchallenge.entrypoint=web - "--certificatesresolvers.http_resolver.acme.httpchallenge.entrypoint=web"
- --certificatesresolvers.le_http.acme.email=admin@mapletree.email - "--certificatesresolvers.http_resolver.acme.storage=/letsencrypt/acme.json"
- --certificatesresolvers.le_http.acme.storage=/letsencrypt/acme.json - "--certificatesresolvers.http_resolver.acme.email=${ACME_EMAIL}"
environment: environment:
# Pass the variables through
- DESEC_TOKEN=${DESEC_TOKEN} - DESEC_TOKEN=${DESEC_TOKEN}
- DESEC_DOMAIN=${DESEC_DOMAIN} - DESEC_DOMAIN=${DESEC_DOMAIN}
# (Any other Traefik env vars you need)
volumes: volumes:
- "/var/run/docker.sock:/var/run/docker.sock:ro" - "/var/run/docker.sock:/var/run/docker.sock:ro"
- "/docker/core/traefik/letsencrypt:/letsencrypt" - "/docker/traefik/letsencrypt:/letsencrypt"
- "${REPO_ROOT}/traefik/dynamic:/etc/traefik/dynamic" - "/docker/traefik/dynamic:/etc/traefik/dynamic"