giteadmin/Docker-Projects
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial commit

Browse Source
This commit is contained in:
Jonathan Agmon
2025-10-22 19:59:09 +00:00
commit 67996ade86
34 changed files with 905 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

65
frontend/traefik/compose.yml Normal file
View File

@@ -0,0 +1,65 @@
services:
traefik:
image: "traefik:v3.5.3"
container_name: ${SUBDOMAIN}
restart: always
command:
- "--log.level=DEBUG"
- "--api.insecure=false"
- "--api.dashboard=true"
- "--providers.docker=true"
- "--providers.docker.exposedbydefault=false"
- "--entrypoints.web.address=:80"
- "--entrypoints.web.http.redirections.entrypoint.to=websecure"
- "--entrypoints.web.http.redirections.entrypoint.scheme=https"
- "--entrypoints.web.http.redirections.entrypoint.permanent=true"
- "--entrypoints.websecure.address=:443"
- "--entrypoints.websecure.http.tls=true"
- "--entrypoints.websecure.http.tls.certresolver=cloudflare"
- "--entrypoints.websecure.http.tls.domains[0].main=${DOMAIN_NAME}"
- "--entrypoints.websecure.http.tls.domains[0].sans=*.${DOMAIN_NAME}"
- "--entryPoints.web.forwardedHeaders.trustedIPs=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22"
- "--entryPoints.websecure.forwardedHeaders.trustedIPs=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22"
- "--certificatesresolvers.cloudflare.acme.dnschallenge=true"
- "--certificatesresolvers.cloudflare.acme.dnschallenge.provider=cloudflare"
- "--certificatesresolvers.cloudflare.acme.email=${CF_API_EMAIL}"
- "--certificatesresolvers.cloudflare.acme.storage=/letsencrypt/acme.json"
labels:
- traefik.enable=true
- traefik.http.routers.traefik_dashboard.rule=Host(`traefik.jojops.com`)
# - traefik.http.routers.traefik_dashboard.rule=Host(`traefik.jojops.com`) && PathPrefix(`/outpost.goauthentik.io/`)
- traefik.http.routers.traefik_dashboard.entrypoints=websecure
- traefik.http.routers.traefik_dashboard.service=api@internal
- traefik.http.routers.traefik_dashboard.tls=true
- traefik.http.middlewares.myauth.basicauth.users=${TRAEFIK_USER}
# - traefik.http.middlewares.myauth.basicauth.users=test:$$apr1$$46.RmdYB$$Rx33ChqUskl4PF1ZqSXYV1
# - traefik.http.routers.traefik_dashboard.middlewares=myauth@docker
- traefik.http.routers.traefik_dashboard.middlewares=authentik-forwardauth@docker
- traefik.http.routers.traefik_dashboard.tls.certresolver=cloudflare
# - traefik.http.routers.traefik-secure.tls.domains[0].main=jojops.com
# - traefik.http.routers.traefik-secure.tls.domains[0].sans=*.jojops.com
# - traefik.http.middlewares.myauth.redirectscheme.scheme=https
- traefik.http.services.traefik_dashboard.loadbalancer.server.port=80
# - "traefik.http.middlewares.cloudflare-ips.ipallowlist.sourcerange=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22,2400:cb00::/32,2606:4700::/32,2803:f800::/32,2405:b500::/32,2405:8100::/32,2a06:98c0::/29,2c0f:f248::/32"
env_file:
- .env
volumes:
- ./traefik_data:/letsencrypt
- /var/run/docker.sock:/var/run/docker.sock:ro
ports:
- "80:80"
- "443:443"
networks:
- frontend
- webapp
- mgmt
networks:
frontend:
external:
true
webapp:
external:
true
mgmt:
external:
true