--- /dev/null
+services:
+ dns-server:
+ container_name: dns-server
+ image: technitium/dns-server:latest
+ restart: always
+ #ports:
+ #- "5380:5380/tcp" #DNS web console (HTTP)
+ #- "53443:53443/tcp" #DNS web console (HTTPS)
+ #- "53:53/udp" #DNS service
+ #- "53:53/tcp" #DNS service
+ # - "853:853/udp" #DNS-over-QUIC service
+ # - "853:853/tcp" #DNS-over-TLS service
+ # - "443:443/udp" #DNS-over-HTTPS service (HTTP/3)
+ # - "443:443/tcp" #DNS-over-HTTPS service (HTTP/1.1, HTTP/2)
+ # - "80:80/tcp" #DNS-over-HTTP service (use with reverse proxy or certbot certificate renewal)
+ # - "8053:8053/tcp" #DNS-over-HTTP service (use with reverse proxy)
+ # - "67:67/udp" #DHCP service
+ environment:
+ - TZ=${DOCKER_TZ}
+ # - DNS_SERVER_DOMAIN=dns-server #The primary domain name used by this DNS Server to identify itself.
+ # - DNS_SERVER_ADMIN_PASSWORD=password #DNS web console admin user password.
+ # - DNS_SERVER_ADMIN_PASSWORD_FILE=password.txt #The path to a file that contains a plain text password for the DNS web console admin user.
+ # - DNS_SERVER_PREFER_IPV6=false #DNS Server will use IPv6 for querying whenever possible with this option enabled.
+ # - DNS_SERVER_WEB_SERVICE_LOCAL_ADDRESSES=172.17.0.1,127.0.0.1 #Comma separated list of network interface IP addresses that you want the web service to listen on for requests. The "172.17.0.1" address is the built-in Docker bridge. The "[::]" is the default value if not specified. Note! This must be used only with "host" network mode.
+ # - DNS_SERVER_WEB_SERVICE_HTTP_PORT=5380 #The TCP port number for the DNS web console over HTTP protocol.
+ # - DNS_SERVER_WEB_SERVICE_HTTPS_PORT=53443 #The TCP port number for the DNS web console over HTTPS protocol.
+ # - DNS_SERVER_WEB_SERVICE_ENABLE_HTTPS=false #Enables HTTPS for the DNS web console.
+ # - DNS_SERVER_WEB_SERVICE_USE_SELF_SIGNED_CERT=false #Enables self signed TLS certificate for the DNS web console.
+ # - DNS_SERVER_WEB_SERVICE_TLS_CERTIFICATE_PATH=/etc/dns/tls/cert.pfx #The file path to the TLS certificate for the DNS web console.
+ # - DNS_SERVER_WEB_SERVICE_TLS_CERTIFICATE_PASSWORD=password #The password for the TLS certificate for the DNS web console.
+ # - DNS_SERVER_WEB_SERVICE_HTTP_TO_TLS_REDIRECT=false #Enables HTTP to HTTPS redirection for the DNS web console.
+ # - DNS_SERVER_OPTIONAL_PROTOCOL_DNS_OVER_HTTP=false #Enables DNS server optional protocol DNS-over-HTTP on TCP port 8053 to be used with a TLS terminating reverse proxy like nginx.
+ # - DNS_SERVER_RECURSION=AllowOnlyForPrivateNetworks #Recursion options: Allow, Deny, AllowOnlyForPrivateNetworks, UseSpecifiedNetworkACL.
+ # - DNS_SERVER_RECURSION_NETWORK_ACL=192.168.10.0/24, !192.168.10.2 #Comma separated list of IP addresses or network addresses to allow access. Add ! character at the start to deny access, e.g. !192.168.10.0/24 will deny entire subnet. The ACL is processed in the same order its listed. If no networks match, the default policy is to deny all except loopback. Valid only for `UseSpecifiedNetworkACL` recursion option.
+ # - DNS_SERVER_RECURSION_DENIED_NETWORKS=1.1.1.0/24 #Comma separated list of IP addresses or network addresses to deny recursion. Valid only for `UseSpecifiedNetworkACL` recursion option. This option is obsolete and DNS_SERVER_RECURSION_NETWORK_ACL should be used instead.
+ # - DNS_SERVER_RECURSION_ALLOWED_NETWORKS=127.0.0.1, 192.168.1.0/24 #Comma separated list of IP addresses or network addresses to allow recursion. Valid only for `UseSpecifiedNetworkACL` recursion option. This option is obsolete and DNS_SERVER_RECURSION_NETWORK_ACL should be used instead.
+ # - DNS_SERVER_ENABLE_BLOCKING=false #Sets the DNS server to block domain names using Blocked Zone and Block List Zone.
+ # - DNS_SERVER_ALLOW_TXT_BLOCKING_REPORT=false #Specifies if the DNS Server should respond with TXT records containing a blocked domain report for TXT type requests.
+ # - DNS_SERVER_BLOCK_LIST_URLS= #A comma separated list of block list URLs.
+ # - DNS_SERVER_FORWARDERS=1.1.1.1, 8.8.8.8 #Comma separated list of forwarder addresses.
+ # - DNS_SERVER_FORWARDER_PROTOCOL=Tcp #Forwarder protocol options: Udp, Tcp, Tls, Https, HttpsJson.
+ # - DNS_SERVER_LOG_USING_LOCAL_TIME=true #Enable this option to use local time instead of UTC for logging.
+ volumes:
+ - ${DOCKER_CFG_DIR}/dns-server:/etc/dns
+ network_mode: host
+ labels:
+ - "traefik.enable=true"
+ # Router: HTTP
+ - "traefik.http.routers.dns-server.entrypoints=http"
+ - "traefik.http.routers.dns-server.rule=Host(`network.giorgioravera.it`) && PathPrefix(`/dns-server`)"
+ - "traefik.http.routers.dns-server.middlewares=dns-server-stripprefix"
+ - "traefik.http.routers.dns-server.middlewares=dns-server-https-redirect"
+ # Router: HTTPS
+ - "traefik.http.routers.dns-server-secure.entrypoints=https"
+ - "traefik.http.routers.dns-server-secure.rule=Host(`network.giorgioravera.it`) && PathPrefix(`/dns-server`)"
+ - "traefik.http.routers.dns-server-secure.tls=true"
+ - "traefik.http.routers.dns-server-secure.service=dns-server"
+ - "traefik.http.routers.dns-server-secure.middlewares=dns-server-stripprefix"
+ # Middlewares: Redirect http to https
+ - "traefik.http.middlewares.dns-server-https-redirect.redirectscheme.scheme=https"
+ # Middlewares: Prefix
+ - "traefik.http.middlewares.dns-server-stripprefix.stripprefix.prefixes=/dns-server"
+ # Services: Loadbalancer
+ - "traefik.http.services.dns-server.loadbalancer.server.port=5380"
- "traefik.http.routers.amule-secure.tls=true"
- "traefik.http.routers.amule-secure.service=amule"
- "traefik.http.routers.amule-secure.middlewares=amule-stripprefix"
- # Middlewares: Redirect http to https
+ # Middleware: Redirect http to https
- "traefik.http.middlewares.amule-https-redirect.redirectscheme.scheme=https"
+ # Middleware: Prefix
- "traefik.http.middlewares.amule-stripprefix.stripprefix.prefixes=/amule"
- # Services: Loadbalancer
+ # Service: Loadbalancer
- "traefik.http.services.amule.loadbalancer.server.port=4711"
networks:
# Router: HTTP
- "traefik.http.routers.filebrowser.entrypoints=http"
- "traefik.http.routers.filebrowser.rule=Host(`download.giorgioravera.it`)"
- #- "traefik.http.routers.filebrowser.service=filebrowser"
- "traefik.http.routers.filebrowser.middlewares=filebrowser-https-redirect"
# Router: HTTPS
- "traefik.http.routers.filebrowser-secure.entrypoints=https"
- "traefik.http.routers.filebrowser-secure.rule=Host(`download.giorgioravera.it`)"
- "traefik.http.routers.filebrowser-secure.tls=true"
- "traefik.http.routers.filebrowser-secure.service=filebrowser"
- # Middlewares: Redirect http to https
+ # Middleware: Redirect http to https
- "traefik.http.middlewares.filebrowser-https-redirect.redirectscheme.scheme=https"
- # Services: Loadbalancer
+ # Service: Loadbalancer
- "traefik.http.services.filebrowser.loadbalancer.server.port=80"
networks:
- "traefik.http.routers.jackett.entrypoints=http"\r
- "traefik.http.routers.jackett.rule=Host(`download.giorgioravera.it`) &&\r
(PathPrefix(`/sources`) || PathPrefix(`/jackett`))"\r
- #- "traefik.http.routers.jackett.service=jackett"\r
- "traefik.http.routers.jackett.middlewares=jackett-stripprefix"\r
- "traefik.http.routers.jackett.middlewares=jackett-https-redirect"\r
# Router: HTTPS\r
- "traefik.http.routers.jackett-secure.tls=true"\r
- "traefik.http.routers.jackett-secure.service=jackett"\r
- "traefik.http.routers.jackett-secure.middlewares=jackett-stripprefix"\r
- # Middlewares: Redirect http to https\r
+ # Middleware: Redirect http to https\r
- "traefik.http.middlewares.jackett-https-redirect.redirectscheme.scheme=https"\r
+ # Middleware: Prefix\r
- "traefik.http.middlewares.jackett-stripprefix.stripprefix.prefixes=/sources"\r
- # Services: Loadbalancer\r
+ # Service: Loadbalancer\r
- "traefik.http.services.jackett.loadbalancer.server.port=9117"\r
\r
networks:\r
- "traefik.http.routers.radarr.entrypoints=http"\r
- "traefik.http.routers.radarr.rule=Host(`download.giorgioravera.it`) &&\r
(PathPrefix(`/film`) || PathPrefix(`/radarr`))"\r
- #- "traefik.http.routers.radarr.service=radarr"\r
- "traefik.http.routers.radarr.middlewares=radarr-stripprefix"\r
- "traefik.http.routers.radarr.middlewares=radarr-https-redirect"\r
# Router: HTTPS\r
- "traefik.http.routers.radarr-secure.tls=true"\r
- "traefik.http.routers.radarr-secure.service=radarr"\r
- "traefik.http.routers.radarr-secure.middlewares=radarr-stripprefix"\r
- # Middlewares: Redirect http to https\r
+ # Middleware: Redirect http to https\r
- "traefik.http.middlewares.radarr-https-redirect.redirectscheme.scheme=https"\r
+ # Middleware: Prefix\r
- "traefik.http.middlewares.radarr-stripprefix.stripprefix.prefixes=/film"\r
- # Services: Loadbalancer\r
+ # Service: Loadbalancer\r
- "traefik.http.services.radarr.loadbalancer.server.port=7878"\r
\r
networks:\r
- "traefik.http.routers.readarr.entrypoints=http"\r
- "traefik.http.routers.readarr.rule=Host(`download.giorgioravera.it`) &&\r
(PathPrefix(`/books`) || PathPrefix(`/readarr`))"\r
- #- "traefik.http.routers.readarr.service=readarr"\r
- "traefik.http.routers.readarr.middlewares=readarr-stripprefix"\r
- "traefik.http.routers.readarr.middlewares=readarr-https-redirect"\r
# Router: HTTPS\r
- "traefik.http.routers.readarr-secure.tls=true"\r
- "traefik.http.routers.readarr-secure.service=readarr"\r
- "traefik.http.routers.readarr-secure.middlewares=readarr-stripprefix"\r
- # Middlewares: Redirect http to https\r
+ # Middleware: Redirect http to https\r
- "traefik.http.middlewares.readarr-https-redirect.redirectscheme.scheme=https"\r
+ # Middleware: Prefix\r
- "traefik.http.middlewares.readarr-stripprefix.stripprefix.prefixes=/books"\r
- # Services: Loadbalancer\r
+ # Service: Loadbalancer\r
- "traefik.http.services.readarr.loadbalancer.server.port=8787"\r
\r
networks:\r
- "traefik.http.routers.sonarr.entrypoints=http"\r
- "traefik.http.routers.sonarr.rule=Host(`download.giorgioravera.it`) &&\r
(PathPrefix(`/serietv`) || PathPrefix(`/sonarr`))"\r
- #- "traefik.http.routers.sonarr.service=sonarr"\r
- "traefik.http.routers.sonarr.middlewares=sonarr-stripprefix"\r
- "traefik.http.routers.sonarr.middlewares=sonarr-https-redirect"\r
# Router: HTTPS\r
- "traefik.http.routers.sonarr-secure.tls=true"\r
- "traefik.http.routers.sonarr-secure.service=sonarr"\r
- "traefik.http.routers.sonarr-secure.middlewares=sonarr-stripprefix"\r
- # Middlewares: Redirect http to https\r
+ # Middleware: Redirect http to https\r
- "traefik.http.middlewares.sonarr-https-redirect.redirectscheme.scheme=https"\r
+ # Middleware: Prefix\r
- "traefik.http.middlewares.sonarr-stripprefix.stripprefix.prefixes=/serietv"\r
- # Services: Loadbalancer\r
+ # Service: Loadbalancer\r
- "traefik.http.services.sonarr.loadbalancer.server.port=8989"\r
\r
networks:\r
- "traefik.http.routers.transmission.entrypoints=http"
- "traefik.http.routers.transmission.rule=Host(`download.giorgioravera.it`) &&
(PathPrefix(`/torrent`) || PathPrefix(`/transmission`))"
- #- "traefik.http.routers.transmission.service=transmission"
- "traefik.http.routers.transmission.middlewares=transmission-stripprefix"
- "traefik.http.routers.transmission.middlewares=transmission-https-redirect"
# Router: HTTPS
- "traefik.http.routers.transmission-secure.tls=true"
- "traefik.http.routers.transmission-secure.service=transmission"
- "traefik.http.routers.transmission-secure.middlewares=transmission-stripprefix"
- # Middlewares: Redirect http to https
+ # Middleware: Redirect http to https
- "traefik.http.middlewares.transmission-https-redirect.redirectscheme.scheme=https"
+ # Middleware: Prefix
- "traefik.http.middlewares.transmission-stripprefix.stripprefix.prefixes=/torrent"
- # Services: Loadbalancer
+ # Service: Loadbalancer
- "traefik.http.services.transmission.loadbalancer.server.port=9091"
networks:
-version: '3'
-
services:
esphome:
container_name: esphome
# Router: HTTP
- "traefik.http.routers.esphome.entrypoints=http"
- "traefik.http.routers.esphome.rule=Host(`home.giorgioravera.it`) && PathPrefix(`/esphome`)"
- #- "traefik.http.routers.esphome.service=esphome"
- "traefik.http.routers.esphome.middlewares=esphome-stripprefix"
- "traefik.http.routers.esphome.middlewares=esphome-https-redirect"
# Router: HTTPS
- "traefik.http.routers.esphome-secure.tls=true"
- "traefik.http.routers.esphome-secure.service=esphome"
- "traefik.http.routers.esphome-secure.middlewares=esphome-stripprefix"
- # Middlewares: Redirect http to https
+ # Middleware: Redirect http to https
- "traefik.http.middlewares.esphome-https-redirect.redirectscheme.scheme=https"
+ # Middleware: Prefix
- "traefik.http.middlewares.esphome-stripprefix.stripprefix.prefixes=/esphome"
- # Services: Loadbalancer
+ # Service: Loadbalancer
- "traefik.http.services.esphome.loadbalancer.server.port=6052"
#networks:
# Router: HTTPS
- "traefik.http.routers.homeassistant.entrypoints=http"
- "traefik.http.routers.homeassistant.rule=Host(`home.giorgioravera.it`)"
- #- "traefik.http.routers.homeassistant.service=homeassistant"
- "traefik.http.routers.homeassistant.middlewares=homeassistant-https-redirect"
# Router: HTTPS
- "traefik.http.routers.homeassistant-secure.entrypoints=https"
- "traefik.http.routers.homeassistant-secure.rule=Host(`home.giorgioravera.it`)"
- "traefik.http.routers.homeassistant-secure.tls=true"
- "traefik.http.routers.homeassistant-secure.service=homeassistant"
- # Middlewares: Redirect http to https
+ # Middleware: Redirect http to https
- "traefik.http.middlewares.homeassistant-https-redirect.redirectscheme.scheme=https"
- # Services: Loadbalancer
+ # Service: Loadbalancer
- "traefik.http.services.homeassistant.loadbalancer.server.port=8123"
zigbee2mqtt:
# Router: HTTP
- "traefik.http.routers.zigbee2mqtt.entrypoints=http"
- "traefik.http.routers.zigbee2mqtt.rule=Host(`home.giorgioravera.it`) && PathPrefix(`/zigbee2mqtt`)"
- #- "traefik.http.routers.zigbee2mqtt.service=zigbee2mqtt"
- "traefik.http.routers.zigbee2mqtt.middlewares=zigbee2mqtt-stripprefix"
- "traefik.http.routers.zigbee2mqtt.middlewares=zigbee2mqtt-https-redirect"
# Router: HTTPS
- "traefik.http.routers.zigbee2mqtt-secure.tls=true"
- "traefik.http.routers.zigbee2mqtt-secure.service=zigbee2mqtt"
- "traefik.http.routers.zigbee2mqtt-secure.middlewares=zigbee2mqtt-stripprefix"
- # Middlewares: Redirect http to https
+ # Middleware: Redirect http to https
- "traefik.http.middlewares.zigbee2mqtt-https-redirect.redirectscheme.scheme=https"
+ # Middleware: Prefix
- "traefik.http.middlewares.zigbee2mqtt-stripprefix.stripprefix.prefixes=/zigbee2mqtt"
- # Services: Loadbalancer
+ # Service: Loadbalancer
- "traefik.http.services.zigbee2mqtt.loadbalancer.server.port=8080"
mosquitto:
# Router: HTTP
- "traefik.http.routers.openvscode-server.entrypoints=http"
- "traefik.http.routers.openvscode-server.rule=Host(`code.giorgioravera.it`)"
- #- "traefik.http.routers.openvscode-server.service=openvscode-server"
- #- "traefik.http.routers.openvscode-server.middlewares=openvscode-server-auth-passwd"
- #- "traefik.http.routers.openvscode-server.middlewares=openvscode-server-auth-ldap"
- "traefik.http.routers.openvscode-server.middlewares=openvscode-server-https-redirect"
# Router: HTTPS
- "traefik.http.routers.openvscode-server-secure.entrypoints=https"
- "traefik.http.routers.openvscode-server-secure.service=openvscode-server"
#- "traefik.http.routers.openvscode-server-secure.middlewares=openvscode-server-passwd"
- "traefik.http.routers.openvscode-server-secure.middlewares=openvscode-server-auth-ldap"
- # Middlewares: Redirect http to https
+ # Middleware: Redirect http to https
- "traefik.http.middlewares.openvscode-server-https-redirect.redirectscheme.scheme=https"
- # Middlewares: Passwd Auth
+ # Middleware: Passwd Auth
#- "traefik.http.middlewares.openvscode-server-auth-passwd.basicauth.usersfile=/passwd/openvscode"
- # Middlewares: LDAP Auth
+ # Middleware: LDAP Auth
- "traefik.http.middlewares.openvscode-server-auth-ldap.plugin.ldapAuth.enabled=true"
- "traefik.http.middlewares.openvscode-server-auth-ldap.plugin.ldapAuth.url=ldaps://ldap.giorgioravera.it"
- "traefik.http.middlewares.openvscode-server-auth-ldap.plugin.ldapAuth.port=636"
- "traefik.http.middlewares.openvscode-server-auth-ldap.plugin.ldapAuth.useTLS=true"
- "traefik.http.middlewares.openvscode-server-auth-ldap.plugin.ldapAuth.baseDN=ou=Users,dc=giorgioravera,dc=it"
- "traefik.http.middlewares.openvscode-server-auth-ldap.plugin.ldapAuth.attribute=uid"
- # Services: Loadbalancer
+ # Service: Loadbalancer
- "traefik.http.services.openvscode-server.loadbalancer.server.port=3000"
networks:
# Router: HTTP
- "traefik.http.routers.portainer.entrypoints=http"
- "traefik.http.routers.portainer.rule=Host(`docker.giorgioravera.it`)"
- #- "traefik.http.routers.portainer.service=portainer"
- "traefik.http.routers.portainer.middlewares=portainer-https-redirect"
# Router: HTTPS
- "traefik.http.routers.portainer-secure.entrypoints=https"
- "traefik.http.routers.portainer-secure.rule=Host(`docker.giorgioravera.it`)"
- "traefik.http.routers.portainer-secure.tls=true"
- "traefik.http.routers.portainer-secure.service=portainer"
- # Middlewares: Redirect http to https
+ # Middleware: Redirect http to https
- "traefik.http.middlewares.portainer-https-redirect.redirectscheme.scheme=https"
- # Services: Loadbalancer
+ # Service: Loadbalancer
- "traefik.http.services.portainer.loadbalancer.server.port=9000"
-
- #portariner_agent:
- # container_name: portainer_agent
- # image: portainer/agent:lts
- # restart: always
- # ports:
- # - 9000:9001
- # volumes:
- # - /var/run/docker.sock:/var/run/docker.sock
- # - /var/lib/docker/volumes:/var/lib/docker/volumes
- # networks:
- # - proxy
-
networks:
proxy:
external: true
restart: always
ports:
- 9001:9001
+ environment:
+ - TZ=${DOCKER_TZ}
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /var/lib/docker/volumes:/var/lib/docker/volumes
--- /dev/null
+service:
+ portal:
+ image: busybox:latest
+ container_name: portal
+ command: httpd -f -v -p 80 -h /www
+ environment:
+ - TZ=${DOCKER_TZ}
+ volumes:
+ - ${DOCKER_CFG_DIR}/portal:/www:ro
+ labels:
+ - "traefik.enable=true"
+ # Router HTTP
+ - "traefik.http.routers.portal.entrypoints=http"
+ - "traefik.http.routers.portal.rule=Host(`network.giorgioravera.it`)"
+ - "traefik.http.routers.portal.middlewares=portal-https-redirect"
+ # Router HTTPS
+ - "traefik.http.routers.portal-secure.entrypoints=https"
+ - "traefik.http.routers.portal-secure.rule=Host(`network.giorgioravera.it`)"
+ - "traefik.http.routers.portal-secure.tls=true"
+ - "traefik.http.routers.portal-secure.service=portal"
+ # Middleware: Redirect http to https
+ - "traefik.http.middlewares.portal-https-redirect.redirectscheme.scheme=https"
+ # Service: Loadbalancer
+ - "traefik.http.services.portal.loadbalancer.server.port=80"
# Router: HTTP
- "traefik.http.routers.traefik.entrypoints=http"
- "traefik.http.routers.traefik.rule=Host(`traefik.giorgioravera.it`)"
- #- "traefik.http.routers.traefik.service=api@internal"
- #- "traefik.http.routers.traefik.middlewares=traefik-auth-passwd"
- "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
# Router: HTTPS
- "traefik.http.routers.traefik-secure.entrypoints=https"
- "traefik.http.routers.traefik-secure.tls=true"
- "traefik.http.routers.traefik-secure.service=api@internal"
- "traefik.http.routers.traefik-secure.middlewares=traefik-auth-passwd"
- # Middlewares: Redirect http to https
+ # Middleware: Redirect http to https
- "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
- # Middlewares: Passwd Auth
+ # Middleware: Passwd Auth
- "traefik.http.middlewares.traefik-auth-passwd.basicauth.usersfile=/passwd/traefik"
- # Services: Loadbalancer
+ # Service: Loadbalancer
- "traefik.http.services.traefik.loadbalancer.server.port=9999"
+++ /dev/null
-services:
- traefik:
- container_name: traefik
- image: traefik:latest
- command:
- # Enable Hub communication (open the port 9900 and 9901 by default)
- - --experimental.hub=true
- - --hub.tls.insecure=true
- - --metrics.prometheus.addrouterslabels=true
-# - --api
-# - --api.dashboard
-# - --entrypoints.http.address=:80
-# - --entrypoints.https.address=:443
-# - --providers.docker=true
-# - --providers.file.watch=true
-# - --log.level=DEBUG
- restart: always
- #ports:
- # - 80:80
- # - 443:443
- environment:
- - TZ=${DOCKER_TZ}
- volumes:
- - ${DOCKER_CFG_DIR}/traefik/traefik.yml:/traefik.yml:ro
- - ${DOCKER_CFG_DIR}/traefik/passwd:/passwd
- #- ${DOCKER_CFG_DIR}/traefik/acme.json:/acme.json
- - ${DOCKER_CFG_DIR}/traefik/config:/config
- - ${DOCKER_CFG_DIR}/traefik/traefik.log:/traefik.log
- - ${DOCKER_CFG_DIR}/traefik/access.log:/access.log
- - /etc/ssl/giorgioravera.it/fullchain.pem:/certs/fullchain.pem
- - /etc/ssl/giorgioravera.it/privkey.pem:/certs/privkey.pem
- - /var/run/docker.sock:/var/run/docker.sock
- network_mode: host
- labels:
- - "traefik.enable=true"
- # Router: HTTP
- - "traefik.http.routers.traefik.entrypoints=http"
- - "traefik.http.routers.traefik.rule=Host(`traefik.giorgioravera.it`)"
- #- "traefik.http.routers.traefik.service=api@internal"
- - "traefik.http.routers.traefik.middlewares=traefik-auth"
- - "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
- # Router: HTTPS
- - "traefik.http.routers.traefik-secure.entrypoints=https"
- - "traefik.http.routers.traefik-secure.rule=Host(`traefik.giorgioravera.it`)"
- - "traefik.http.routers.traefik-secure.tls=true"
- - "traefik.http.routers.traefik-secure.service=api@internal"
- - "traefik.http.routers.traefik-secure.middlewares=traefik-auth"
- # Middlewares: Redirect http to https
- - "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
- - "traefik.http.middlewares.traefik-auth.basicauth.usersfile=/passwd"
- # Services: Loadbalancer
- - "traefik.http.services.workaround.loadbalancer.server.port=9999"
-
- # Start the agent with the latest version
- hub-agent:
- container_name: hub-agent
- image: ghcr.io/traefik/hub-agent-traefik:v1.0.0
- command:
- - run
- - --hub.token=efabfa58-21b6-489c-8d5d-da82f64e5f73
- - --auth-server.advertise-url=http://hub-agent
- - --traefik.host=traefik
- - --traefik.tls.insecure=true
- restart: "on-failure"
- environment:
- - TZ=${DOCKER_TZ}
- volumes:
- - /var/run/docker.sock:/var/run/docker.sock
- depends_on:
- - traefik
- network_mode: host
- labels:
- - "traefik.enable=false"
-