Traefik
This commit is contained in:
@@ -1,6 +1,6 @@
|
|||||||
services:
|
services:
|
||||||
traefik-portainer:
|
traefik:
|
||||||
image: traefik:${TRAEFIK_VERSION:-v3.1}
|
image: ${TRAEFIK_IMAGE}
|
||||||
container_name: traefik
|
container_name: traefik
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
extra_hosts:
|
extra_hosts:
|
||||||
@@ -8,15 +8,15 @@ services:
|
|||||||
|
|
||||||
command:
|
command:
|
||||||
# Logs
|
# Logs
|
||||||
- "--log.level=${TRAEFIK_LOG_LEVEL:-INFO}"
|
- "--log.level=${TRAEFIK_LOG_LEVEL}"
|
||||||
|
|
||||||
# Dashboard (por ahora solo interno)
|
# Dashboard (por ahora solo interno)
|
||||||
- "--api.dashboard=true"
|
- "--api.dashboard=true"
|
||||||
- "--api.insecure=false"
|
- "--api.insecure=false"
|
||||||
|
|
||||||
# Entrypoints
|
# Entrypoints
|
||||||
- "--entrypoints.web.address=:${TRAEFIK_HTTP_PORT:-80}"
|
- "--entrypoints.web.address=:80"
|
||||||
- "--entrypoints.websecure.address=:${TRAEFIK_HTTPS_PORT:-443}"
|
- "--entrypoints.websecure.address=:443"
|
||||||
|
|
||||||
# Redirección HTTP -> HTTPS
|
# Redirección HTTP -> HTTPS
|
||||||
- "--entrypoints.web.http.redirections.entrypoint.to=websecure"
|
- "--entrypoints.web.http.redirections.entrypoint.to=websecure"
|
||||||
@@ -25,26 +25,26 @@ services:
|
|||||||
# Proveedor Docker
|
# Proveedor Docker
|
||||||
- "--providers.docker=true"
|
- "--providers.docker=true"
|
||||||
- "--providers.docker.exposedbydefault=false"
|
- "--providers.docker.exposedbydefault=false"
|
||||||
- "--providers.docker.network=${TRAEFIK_DOCKER_NETWORK:-proxy}"
|
- "--providers.docker.network=${TRAEFIK_DOCKER_NETWORK}"
|
||||||
|
|
||||||
# Proveedor de ficheros dinámicos
|
# Proveedor de ficheros dinámicos
|
||||||
- "--providers.file.directory=/dynamic"
|
- "--providers.file.directory=/dynamic"
|
||||||
- "--providers.file.watch=true"
|
- "--providers.file.watch=true"
|
||||||
|
|
||||||
# ACME / Let's Encrypt (resolver "letsencrypt" parametrizado)
|
# ACME / Let's Encrypt (resolver "letsencrypt")
|
||||||
- "--certificatesresolvers.${TRAEFIK_ACME_RESOLVER:-letsencrypt}.acme.email=${TRAEFIK_ACME_EMAIL}"
|
- "--certificatesresolvers.letsencrypt.acme.email=${TRAEFIK_ACME_EMAIL}"
|
||||||
- "--certificatesresolvers.${TRAEFIK_ACME_RESOLVER:-letsencrypt}.acme.storage=/letsencrypt/acme.json"
|
- "--certificatesresolvers.letsencrypt.acme.storage=${TRAEFIK_ACME_STORAGE}"
|
||||||
- "--certificatesresolvers.${TRAEFIK_ACME_RESOLVER:-letsencrypt}.acme.httpchallenge=true"
|
- "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
|
||||||
- "--certificatesresolvers.${TRAEFIK_ACME_RESOLVER:-letsencrypt}.acme.httpchallenge.entrypoint=web"
|
- "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
|
||||||
|
|
||||||
ports:
|
ports:
|
||||||
- "${TRAEFIK_HTTP_PORT:-80}:80"
|
- "${TRAEFIK_HTTP_PORT}:80"
|
||||||
- "${TRAEFIK_HTTPS_PORT:-443}:443"
|
- "${TRAEFIK_HTTPS_PORT}:443"
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
- /var/run/docker.sock:/var/run/docker.sock:ro,Z
|
||||||
- ${TRAEFIK_DYNAMIC_PATH:-/opt/traefik/dynamic}:/dynamic
|
- ${TRAEFIK_DYNAMIC_DIR}:/dynamic:Z
|
||||||
- ${TRAEFIK_LETSENCRYPT_PATH:-/opt/traefik/letsencrypt}:/letsencrypt
|
- ${TRAEFIK_LETSENCRYPT_DIR}:/letsencrypt:Z
|
||||||
|
|
||||||
networks:
|
networks:
|
||||||
- proxy
|
- proxy
|
||||||
@@ -52,5 +52,4 @@ services:
|
|||||||
networks:
|
networks:
|
||||||
proxy:
|
proxy:
|
||||||
external: true
|
external: true
|
||||||
name: ${TRAEFIK_DOCKER_NETWORK:-proxy}
|
|
||||||
|
|
||||||
|
|||||||
@@ -1,14 +1,11 @@
|
|||||||
TRAEFIK_VERSION=v3.1
|
##### Traefik #####
|
||||||
|
TRAEFIK_IMAGE=traefik:v3.1
|
||||||
TRAEFIK_LOG_LEVEL=INFO
|
TRAEFIK_LOG_LEVEL=INFO
|
||||||
|
TRAEFIK_DOCKER_NETWORK=proxy
|
||||||
|
TRAEFIK_ACME_EMAIL=lets.encrypt@thehomelesssherlock.com
|
||||||
|
TRAEFIK_ACME_STORAGE=/letsencrypt/acme.json
|
||||||
TRAEFIK_HTTP_PORT=80
|
TRAEFIK_HTTP_PORT=80
|
||||||
TRAEFIK_HTTPS_PORT=443
|
TRAEFIK_HTTPS_PORT=443
|
||||||
|
TRAEFIK_DYNAMIC_DIR=/opt/traefik/dynamic
|
||||||
TRAEFIK_DOCKER_NETWORK=proxy
|
TRAEFIK_LETSENCRYPT_DIR=/opt/traefik/letsencrypt
|
||||||
|
|
||||||
TRAEFIK_ACME_RESOLVER=letsencrypt
|
|
||||||
TRAEFIK_ACME_EMAIL=lets.encrypt@thehomelesssherlock.com
|
|
||||||
|
|
||||||
TRAEFIK_DYNAMIC_PATH=/opt/traefik/dynamic
|
|
||||||
TRAEFIK_LETSENCRYPT_PATH=/opt/traefik/letsencrypt
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user