This repository has been archived on 2023-12-26. You can view files and clone it, but cannot push or open issues or pull requests.
shoarma/ansible/roles/traefik/docker-stack.yml.j2

103 lines
3.6 KiB
Text
Raw Normal View History

2023-05-02 10:22:16 +00:00
# vi: ft=yaml
version: "3.7"
networks:
traefik:
external: true
2023-05-03 06:09:16 +00:00
configs:
services:
2023-05-20 11:45:25 +00:00
external: true
name: "{{ services.config_name }}"
2023-05-03 06:09:16 +00:00
2023-05-02 10:22:16 +00:00
services:
traefik:
image: traefik:3.0
networks:
- traefik
ports:
2023-05-02 12:41:14 +00:00
- 443:443
2023-05-02 10:22:16 +00:00
- 80:80
- 444:444
2023-05-02 10:22:16 +00:00
deploy:
placement:
2023-05-04 10:29:29 +00:00
constraints:
- node.role == manager
2023-05-02 10:22:16 +00:00
labels:
- traefik.enable=true
- traefik.http.routers.dashboard.entrypoints=localsecure
- traefik.http.routers.dashboard.rule=Host(`traefik.pim.kunis.nl`)
2023-05-02 10:22:16 +00:00
- traefik.http.routers.dashboard.service=api@internal
- traefik.http.services.dummy-svc.loadbalancer.server.port=8080
- traefik.http.routers.dashboard.tls=true
- traefik.http.routers.dashboard.tls.certresolver=letsencrypt
- traefik.docker.network=traefik
2023-05-03 06:09:16 +00:00
- traefik.http.routers.esrom.entrypoints=websecure
- traefik.http.routers.esrom.service=esrom@file
- traefik.http.routers.esrom.rule=Host(`geokunis2.nl`)
- traefik.http.routers.esrom.tls=true
- traefik.http.routers.esrom.tls.certresolver=letsencrypt
2023-05-06 15:12:51 +00:00
- traefik.http.routers.nextcloud.entrypoints=websecure
- traefik.http.routers.nextcloud.service=nextcloud@file
- traefik.http.routers.nextcloud.rule=Host(`cloud.pim.kunis.nl`)
- traefik.http.routers.nextcloud.tls=true
- traefik.http.routers.nextcloud.tls.certresolver=letsencrypt
2023-05-17 22:20:33 +00:00
- traefik.http.routers.uptime.entrypoints=localsecure
- traefik.http.routers.uptime.rule=Host(`uptime.pim.kunis.nl`)
- traefik.http.routers.uptime.service=uptime@file
- traefik.http.routers.uptime.tls=true
- traefik.http.routers.uptime.tls.certresolver=letsencrypt
- traefik.http.routers.ntfy.entrypoints=websecure
- traefik.http.routers.ntfy.rule=Host(`ntfy.pim.kunis.nl`)
- traefik.http.routers.ntfy.service=ntfy@file
- traefik.http.routers.ntfy.tls=true
- traefik.http.routers.ntfy.tls.certresolver=letsencrypt
- traefik.http.routers.apprise.entrypoints=localsecure
- traefik.http.routers.apprise.rule=Host(`apprise.pim.kunis.nl`)
- traefik.http.routers.apprise.service=apprise@file
- traefik.http.routers.apprise.tls=true
- traefik.http.routers.apprise.tls.certresolver=letsencrypt
2023-05-02 10:22:16 +00:00
volumes:
- type: bind
source: /var/run/docker.sock
target: /var/run/docker.sock
- type: bind
source: /mnt/data/traefik/acme.json
target: /acme.json
2023-05-03 06:09:16 +00:00
configs:
- source: services
target: /etc/traefik/services.yml
2023-05-02 10:22:16 +00:00
command:
- --providers.docker
- --providers.docker.swarmmode
- --providers.docker.watch
2023-05-03 06:09:16 +00:00
- --providers.docker.exposedbydefault=false
- --providers.file.filename=/etc/traefik/services.yml
2023-05-02 10:22:16 +00:00
- --api
2023-05-03 12:05:27 +00:00
- --api.insecure=false
2023-05-02 10:22:16 +00:00
- --api.dashboard=true
2023-05-03 06:09:16 +00:00
2023-05-02 10:22:16 +00:00
- --entrypoints.web.address=:80
2023-05-02 12:41:14 +00:00
- --entrypoints.web.http.redirections.entrypoint=true
- --entrypoints.web.http.redirections.entrypoint.to=websecure
- --entrypoints.web.http.redirections.entrypoint.scheme=https
- --entrypoints.web.http.redirections.entrypoint.permanent=true
2023-05-03 06:09:16 +00:00
2023-05-02 12:41:14 +00:00
- --entrypoints.websecure.address=:443
2023-05-03 06:09:16 +00:00
- --entrypoints.localsecure.address=:444
2023-05-02 12:41:14 +00:00
- --certificatesresolvers.letsencrypt.acme=true
- --certificatesresolvers.letsencrypt.acme.email=pim@kunis.nl
- --certificatesresolvers.letsencrypt.acme.httpchallenge=true
- --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web
2023-05-05 11:47:27 +00:00
- --serversTransport.insecureSkipVerify=true