fix traefik

This commit is contained in:
holzi1005 2025-02-11 18:46:07 +01:00
parent 7633c8d395
commit 9aaca98af6

View file

@ -1,43 +1,23 @@
services: services:
traefik-ja: traefik-ja:
image: "traefik:v2.5" image: "traefik:v2.5"
env_file:
- ./.env
- ./.env.local
- ./.env.custom
command: command:
#- "--log.level=DEBUG" - "--log.level=DEBUG"
- "--api.insecure=false" - "--api.insecure=true"
- "--providers.docker=true" - "--providers.docker=true"
#- "--api.dashboard=true"
- "--providers.docker.exposedbydefault=false" - "--providers.docker.exposedbydefault=false"
- "--entrypoints.unsecure.address=:80" - "--entrypoints.unsecure.address=:80"
# Global HTTPS
- "--entrypoints.web.address=:443" - "--entrypoints.web.address=:443"
# Global HTTP -> HTTPS
- "--entrypoints.unsecure.http.redirections.entryPoint.to=web" - "--entrypoints.unsecure.http.redirections.entryPoint.to=web"
- "--entrypoints.unsecure.http.redirections.entryPoint.scheme=https" - "--entrypoints.unsecure.http.redirections.entryPoint.scheme=https"
# SSL configuration # SSL configuration
- "--certificatesresolvers.letsencrypt.acme.httpchallenge=true" - "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
- "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=unsecure" - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=unsecure"
- "--certificatesresolvers.letsencrypt.acme.email=webmaster@jitsi-admin-master.de" - "--certificatesresolvers.letsencrypt.acme.email=webmaster@odc-master.de"
- "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json" - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
labels:
- "traefik.enable=true"
- "traefik.http.routers.http-catchall.rule=hostregexp(`{host:.+}`)"
- "traefik.http.routers.http-catchall.entrypoints=unsecure"
- "traefik.http.routers.http-catchall.middlewares=redirect-to-https@docker"
- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
- "traefik.http.routers.traefik-ja.rule=Host(`traefik.${PUBLIC_URL}`)"
- "traefik.http.routers.traefik-ja.entrypoints=web"
- "traefik.http.routers.traefik-ja.tls.certresolver=letsencrypt"
- "traefik.http.routers.traefik-ja.service=api@internal"
- "traefik.http.routers.traefik-ja.middlewares=traefik-auth"
- "traefik.http.middlewares.traefik-auth.basicauth.users=test:$$apr1$$H6uskkkW$$IgXLP6ewTrSuBkTrqE8wj/" # test:test
networks: networks:
- external - external
restart: unless-stopped restart: unless-stopped
@ -68,7 +48,7 @@ services:
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.websocket-ja.rule=Host(`${PUBLIC_URL}`) && PathPrefix(`/ws`)" - "traefik.http.routers.websocket-ja.rule=Host(`<clientUrl>`) && PathPrefix(`/ws`)"
- "traefik.http.routers.websocket-ja.entrypoints=web" - "traefik.http.routers.websocket-ja.entrypoints=web"
- "traefik.http.routers.websocket-ja.tls=true" - "traefik.http.routers.websocket-ja.tls=true"
- "traefik.http.services.websocket-ja.loadbalancer.server.port=3000" - "traefik.http.services.websocket-ja.loadbalancer.server.port=3000"
@ -104,7 +84,7 @@ services:
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.app-ja.tls=true" - "traefik.http.routers.app-ja.tls=true"
- "traefik.http.routers.app-ja.rule=Host(`${PUBLIC_URL}`)" - "traefik.http.routers.app-ja.rule=Host(`<clientUrl>`)"
- "traefik.http.routers.app-ja.entrypoints=web" - "traefik.http.routers.app-ja.entrypoints=web"
- "traefik.http.services.app-ja.loadbalancer.server.port=80" - "traefik.http.services.app-ja.loadbalancer.server.port=80"
- "traefik.http.routers.app-ja.tls.certresolver=letsencrypt" - "traefik.http.routers.app-ja.tls.certresolver=letsencrypt"