Skip to content
Snippets Groups Projects
Select Git revision
  • 3e64dfa2b12b4ffa1ae9a32d78e9ffa7d9acfb7e
  • master default protected
  • traefik-3
3 results

docker-compose.yml.sample

Blame
  • docker-compose.yml.sample 1.61 KiB
    version: "3.3"
    
    services:
    
      traefik:
        image: "traefik:v2.5"
        container_name: "traefik"
        ports:
          - "80:80"
          - "443:443"
        volumes:
          - "./letsencrypt:/letsencrypt"
          - "/var/run/docker.sock:/var/run/docker.sock:ro"
          - "./traefik.toml:/etc/traefik/traefik.toml"
          - "./config:/config"
          - "./acme.json:/acme.json"
          - "./log:/var/log"
        networks:
          traefik:
            ipv4_address: '172.19.0.2'
        restart: always
        labels:
          - "traefik.enable=true"
          - "traefik.docker.network=traefik"
          - "traefik.http.routers.traefikapi.rule=Host(`${HOST}`)"
          - "traefik.http.routers.traefikapi.service=api@internal"
          - "traefik.http.routers.traefikapi.tls.certresolver=myresolver"
          - "traefik.http.routers.traefikapi.entrypoints=web,websecure"
          - "traefik.http.routers.traefikapi.middlewares=hardening@docker,auth"
          - "traefik.http.middlewares.auth.basicauth.users=user:htpasswd with $ doubled"
          - "traefik.http.middlewares.hardening.headers.sslredirect=true"
          - "traefik.http.middlewares.hardening.headers.forceSTSHeader=true"
          - "traefik.http.middlewares.hardening.headers.stsIncludeSubdomains=true"
          - "traefik.http.middlewares.hardening.headers.stsSeconds=15552000"
          - "traefik.http.middlewares.hardening.headers.stsPreload=true"
          - "traefik.http.middlewares.hardening.headers.referrerPolicy=no-referrer"
          - "traefik.http.middlewares.hardening.headers.customFrameOptionsValue=SAMEORIGIN"
          - "traefik.http.middlewares.xforwardedproto.headers.customrequestheaders.X-Forwarded-Proto=https"
    
    
    
    
    networks:
      traefik:
        external: true