This repository has been archived on 2023-12-26. You can view files and clone it, but cannot push or open issues or pull requests.
shoarma/ansible/roles/traefik/docker-stack.yml.j2

128 lines
4.3 KiB
Text
Raw Normal View History

2023-05-02 10:22:16 +00:00
# vi: ft=yaml
version: "3.7"
networks:
traefik:
external: true
2023-05-03 06:09:16 +00:00
configs:
services:
2023-05-20 11:45:25 +00:00
external: true
name: "{{ services.config_name }}"
2023-05-03 06:09:16 +00:00
2023-06-19 09:24:48 +00:00
volumes:
acme:
driver_opts:
type: "nfs"
o: "addr=192.168.30.10,nolock,soft,rw"
device: ":/mnt/data/traefik/acme"
2023-05-02 10:22:16 +00:00
services:
traefik:
2023-06-23 17:33:56 +00:00
image: traefik:3.0.0-beta2
2023-05-02 10:22:16 +00:00
networks:
- traefik
ports:
- mode: host
protocol: tcp
published: 443
target: 443
- mode: host
protocol: tcp
published: 80
target: 80
- mode: host
protocol: tcp
published: 444
target: 444
2023-05-02 10:22:16 +00:00
deploy:
placement:
2023-05-04 10:29:29 +00:00
constraints:
- node.role == manager
2023-05-02 10:22:16 +00:00
labels:
- traefik.enable=true
- traefik.http.routers.dashboard.entrypoints=localsecure
2023-07-07 10:46:01 +00:00
- traefik.http.routers.dashboard.rule=Host(`traefik.kun.is`)
2023-05-02 10:22:16 +00:00
- traefik.http.routers.dashboard.service=api@internal
2023-07-07 10:24:59 +00:00
- traefik.http.services.dashboard.loadbalancer.server.port=8080
- traefik.http.routers.dashboard.tls=true
- traefik.http.routers.dashboard.tls.certresolver=letsencrypt
- traefik.docker.network=traefik
2023-05-03 06:09:16 +00:00
- traefik.http.routers.esrom.entrypoints=websecure
- traefik.http.routers.esrom.service=esrom@file
- traefik.http.routers.esrom.rule=Host(`geokunis2.nl`)
- traefik.http.routers.esrom.tls=true
- traefik.http.routers.esrom.tls.certresolver=letsencrypt
2023-05-06 15:12:51 +00:00
2023-05-17 22:20:33 +00:00
- traefik.http.routers.uptime.entrypoints=localsecure
2023-07-12 16:57:17 +00:00
- traefik.http.routers.uptime.rule=Host(`uptime.kun.is`)
2023-05-17 22:20:33 +00:00
- traefik.http.routers.uptime.service=uptime@file
- traefik.http.routers.uptime.tls=true
- traefik.http.routers.uptime.tls.certresolver=letsencrypt
- traefik.http.routers.ntfy.entrypoints=websecure
2023-07-12 18:04:33 +00:00
- traefik.http.routers.ntfy.rule=Host(`ntfy.kun.is`)
2023-05-17 22:20:33 +00:00
- traefik.http.routers.ntfy.service=ntfy@file
- traefik.http.routers.ntfy.tls=true
- traefik.http.routers.ntfy.tls.certresolver=letsencrypt
- traefik.http.routers.apprise.entrypoints=localsecure
2023-07-12 18:04:33 +00:00
- traefik.http.routers.apprise.rule=Host(`apprise.kun.is`)
2023-05-17 22:20:33 +00:00
- traefik.http.routers.apprise.service=apprise@file
- traefik.http.routers.apprise.tls=true
- traefik.http.routers.apprise.tls.certresolver=letsencrypt
2023-05-22 20:26:25 +00:00
2023-06-19 13:13:52 +00:00
- traefik.http.routers.concourse.entrypoints=websecure
- traefik.http.routers.concourse.rule=Host(`ci.kun.is`)
2023-05-22 20:26:25 +00:00
- traefik.http.routers.concourse.service=concourse@file
- traefik.http.routers.concourse.tls=true
- traefik.http.routers.concourse.tls.certresolver=letsencrypt
2023-07-16 11:50:56 +00:00
- traefik.http.routers.discourse.entrypoints=websecure
- traefik.http.routers.discourse.rule=Host(`tuindersweijde.geokunis2.nl`)
- traefik.http.routers.discourse.service=discourse@file
- traefik.http.routers.discourse.tls=true
- traefik.http.routers.discourse.tls.certresolver=letsencrypt
2023-05-02 10:22:16 +00:00
volumes:
- type: bind
source: /var/run/docker.sock
target: /var/run/docker.sock
2023-06-19 09:24:48 +00:00
- type: volume
source: acme
target: /acme
volume:
nocopy: true
2023-05-03 06:09:16 +00:00
configs:
- source: services
target: /etc/traefik/services.yml
2023-05-02 10:22:16 +00:00
command:
- --providers.docker
- --providers.docker.swarmmode
- --providers.docker.watch
2023-05-03 06:09:16 +00:00
- --providers.docker.exposedbydefault=false
- --providers.file.filename=/etc/traefik/services.yml
2023-05-02 10:22:16 +00:00
- --api
2023-05-03 12:05:27 +00:00
- --api.insecure=false
2023-05-02 10:22:16 +00:00
- --api.dashboard=true
2023-05-03 06:09:16 +00:00
2023-05-02 10:22:16 +00:00
- --entrypoints.web.address=:80
2023-05-02 12:41:14 +00:00
- --entrypoints.web.http.redirections.entrypoint=true
- --entrypoints.web.http.redirections.entrypoint.to=websecure
- --entrypoints.web.http.redirections.entrypoint.scheme=https
- --entrypoints.web.http.redirections.entrypoint.permanent=true
2023-05-03 06:09:16 +00:00
2023-05-02 12:41:14 +00:00
- --entrypoints.websecure.address=:443
2023-05-03 06:09:16 +00:00
- --entrypoints.localsecure.address=:444
2023-05-02 12:41:14 +00:00
- --certificatesresolvers.letsencrypt.acme=true
- --certificatesresolvers.letsencrypt.acme.email=pim@kunis.nl
2023-06-19 09:24:48 +00:00
- --certificatesresolvers.letsencrypt.acme.storage=/acme/acme.json
2023-05-02 12:41:14 +00:00
- --certificatesresolvers.letsencrypt.acme.httpchallenge=true
- --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web
2023-05-05 11:47:27 +00:00
- --serversTransport.insecureSkipVerify=true