blob: 14a5440898448240adc881e5f351d7ea217d23b1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
version: "3.7"
services:
reverse-proxy:
image: traefik:v2.4
command:
- --providers.docker
- --entrypoints.web.address=:80
- --entrypoints.websecure.address=:443
- --providers.docker
- --certificatesresolvers.leresolver.acme.httpchallenge=true
- --certificatesresolvers.leresolver.acme.email=<EMAIL>
- --certificatesresolvers.leresolver.acme.httpchallenge.entrypoint=web
- --certificatesresolvers.leresolver.acme.storage=/letsencrypt/acme.json"
ports:
- "80:80"
- "443:443"
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- ./letsencrypt:/letsencrypt
labels:
- "traefik.http.routers.http-catchall.rule=hostregexp(`{host:.+}`)"
- "traefik.http.routers.http-catchall.entrypoints=web"
- "traefik.http.routers.http-catchall.middlewares=redirect-to-https"
- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
portainer:
image: portainer/portainer-ce:2.0.0
command: -H unix:///var/run/docker.sock --admin-password '<PASSWORD>'
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
- /etc/localtime:/etc/localtime:ro
- ./dataportainer:/data
labels:
- "traefik.enable=true"
- "traefik.http.routers.portainer_frontend.rule=Host(`<DOMAIN>`)"
- "traefik.http.routers.portainer_frontend.entrypoints=websecure"
- "traefik.http.routers.portainer_frontend.service=portainer_frontend"
- "traefik.http.routers.portainer_frontend.tls=true"
- "traefik.http.routers.portainer_frontend.tls.certresolver=leresolver"
- "traefik.http.services.portainer_frontend.loadbalancer.server.port=9000"
|