mirror of
https://github.com/Haxxnet/Compose-Examples
synced 2024-11-24 04:21:14 +00:00
32 lines
1.3 KiB
YAML
32 lines
1.3 KiB
YAML
version: '3'
|
|
services:
|
|
traefik:
|
|
container_name: traefik
|
|
image: traefik:2.9
|
|
ports:
|
|
- 80:80 # HTTP
|
|
- 443:443 # HTTPS
|
|
- 127.0.0.1:8080:8080 # MGMT WEB UI
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro # ro = read-only access to the docker.sock
|
|
- ${DOCKER_VOLUME_STORAGE:-/mnt/docker-volumes}/traefik:/etc/traefik/ # put the provided traefik.yml and fileConfig.yml files at this location
|
|
- ${DOCKER_VOLUME_STORAGE:-/mnt/docker-volumes}/traefik/logs:/logs
|
|
networks:
|
|
- proxy
|
|
environment:
|
|
- TZ=Europe/Berlin
|
|
- CF_DNS_API_TOKEN=MyCloudflareApiToken # change this
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.http.routers.api.rule=Host(`traefik.example.com`) # Define the subdomain for the traefik dashboard.
|
|
- traefik.http.routers.api.service=api@internal # Enable Traefik API.
|
|
- traefik.http.routers.api.middlewares=local-ipwhitelist@file,basic-auth@file # protect dashboard with basic auth and restrict access to private class subnets only
|
|
#- traefik.http.middlewares.basic-auth-global.basicauth.users=admin:$$apr1$$epoKf5li$$QfTMJZOCS/halv3CiIUEu0 # protect the traefik dashboard by basic auth (pw=password)
|
|
restart: always
|
|
extra_hosts:
|
|
- host.docker.internal:172.17.0.1
|
|
|
|
networks:
|
|
proxy:
|
|
external: true
|