variables for traefik
This commit is contained in:
parent
8a6f22549d
commit
8a42cb3bb9
1 changed files with 17 additions and 22 deletions
|
|
@ -9,39 +9,34 @@ services:
|
||||||
mem_limit: "1024m"
|
mem_limit: "1024m"
|
||||||
mem_reservation: "128m"
|
mem_reservation: "128m"
|
||||||
restart: always
|
restart: always
|
||||||
#ports:
|
|
||||||
# - "80:80" # HTTP
|
|
||||||
# - "443:443" # HTTPS
|
|
||||||
# - "888:8080" # Traefik Dashboard (optional, password-protect in production!)
|
|
||||||
command:
|
command:
|
||||||
- "--api.dashboard=true"
|
- "--api.dashboard=true"
|
||||||
- "--api.insecure=true" # Remove or secure in prod
|
- "--api.insecure=true"
|
||||||
- "--providers.docker=true"
|
- "--providers.docker=true"
|
||||||
- "--providers.docker.exposedbydefault=false"
|
- "--providers.docker.exposedbydefault=false"
|
||||||
- "--providers.docker.useBindPortIP=false"
|
- "--providers.docker.useBindPortIP=false"
|
||||||
- "--entrypoints.web.address=:80"
|
- "--entrypoints.web.address=:80"
|
||||||
- "--entrypoints.websecure.address=:443"
|
- "--entrypoints.websecure.address=:443"
|
||||||
- "--providers.docker.network=${DOCKER_NETWORK_LIST}"
|
# Variables for flexibility
|
||||||
|
- "--providers.docker.network=${DOCKER_NETWORKS}"
|
||||||
- "--providers.file.directory=/etc/traefik/dynamic"
|
- "--providers.file.directory=/etc/traefik/dynamic"
|
||||||
- "--providers.file.watch=true"
|
- "--providers.file.watch=true"
|
||||||
##DNS resolver
|
## DNS resolver
|
||||||
- "--certificatesresolvers.myresolver.acme.dnschallenge=true"
|
- "--certificatesresolvers.dns_resolver.acme.dnschallenge=true"
|
||||||
- "--certificatesresolvers.myresolver.acme.dnschallenge.provider=desec"
|
- "--certificatesresolvers.dns_resolver.acme.dnschallenge.provider=desec"
|
||||||
- "--certificatesresolvers.myresolver.acme.dnschallenge.delaybeforecheck=90"
|
- "--certificatesresolvers.dns_resolver.acme.dnschallenge.delaybeforecheck=90"
|
||||||
- --certificatesresolvers.myresolver.acme.dnschallenge.resolvers=1.1.1.1:53,8.8.8.8:53
|
- "--certificatesresolvers.dns_resolver.acme.dnschallenge.resolvers=1.1.1.1:53,8.8.8.8:53"
|
||||||
- "--certificatesresolvers.myresolver.acme.email=admin@mapletree.email"
|
- "--certificatesresolvers.dns_resolver.acme.email=${ACME_EMAIL}"
|
||||||
- "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
|
- "--certificatesresolvers.dns_resolver.acme.storage=/letsencrypt/acme.json"
|
||||||
##HTTP resolver
|
## HTTP Resolver
|
||||||
- --certificatesresolvers.le_http.acme.httpchallenge=true
|
- "--certificatesresolvers.http_resolver.acme.httpchallenge=true"
|
||||||
- --certificatesresolvers.le_http.acme.httpchallenge.entrypoint=web
|
- "--certificatesresolvers.http_resolver.acme.httpchallenge.entrypoint=web"
|
||||||
- --certificatesresolvers.le_http.acme.email=admin@mapletree.email
|
- "--certificatesresolvers.http_resolver.acme.storage=/letsencrypt/acme.json"
|
||||||
- --certificatesresolvers.le_http.acme.storage=/letsencrypt/acme.json
|
- "--certificatesresolvers.http_resolver.acme.email=${ACME_EMAIL}"
|
||||||
environment:
|
environment:
|
||||||
# Pass the variables through
|
|
||||||
- DESEC_TOKEN=${DESEC_TOKEN}
|
- DESEC_TOKEN=${DESEC_TOKEN}
|
||||||
- DESEC_DOMAIN=${DESEC_DOMAIN}
|
- DESEC_DOMAIN=${DESEC_DOMAIN}
|
||||||
# (Any other Traefik env vars you need)
|
|
||||||
volumes:
|
volumes:
|
||||||
- "/var/run/docker.sock:/var/run/docker.sock:ro"
|
- "/var/run/docker.sock:/var/run/docker.sock:ro"
|
||||||
- "/docker/core/traefik/letsencrypt:/letsencrypt"
|
- "/docker/traefik/letsencrypt:/letsencrypt"
|
||||||
- "${REPO_ROOT}/traefik/dynamic:/etc/traefik/dynamic"
|
- "/docker/traefik/dynamic:/etc/traefik/dynamic"
|
||||||
Loading…
Reference in a new issue