docker-compose/docker-compose.yml at main · uitsmijter/docker-compose · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

services:
  redis:
    image: 'bitnami/redis:${REDIS_VERSION:-latest}'
    ports:
      - "6379:6379"
    environment:
      - ALLOW_EMPTY_PASSWORD=yes

  traefik:
      image: traefik:${TRAEFIK_VERSION:-latest}
      container_name: traefik
      restart: always
      command:
          - --providers.docker=true
          - --providers.docker.exposedByDefault=false
          - --api=true
          - --api.insecure=true
          - --api.dashboard=true
          - --log.level=${LOG_LEVEL}
          - --entrypoints.http.address=:80
          - --entryPoints.https.address=:443
          - --entrypoints.http.forwardedHeaders.insecure=true
      network_mode: host
      volumes:
          - /var/run/docker.sock:/var/run/docker.sock:ro

  uitsmijter:
    image: ${IMAGENAME}:${TAG}
    depends_on:
      - redis
      - traefik
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.uitsmijter.loadbalancer.server.port=8080"
      - "traefik.http.routers.uitsmijter.rule=${ROUTE}"
      - "traefik.http.routers.uitsmijter.tls=${TLS}"
      - "traefik.http.routers.uitsmijter.tls.certresolver=le"
      - "traefik.http.routers.uitsmijter.entrypoints=${LISTEN}"
      - "traefik.http.routers.uitsmijter.service=uitsmijter"
    environment:
      REDIS_HOST: redis
    volumes:
      - ./Resources:/app/Resources
      - ./Public:/app/Public

  userapp:
    image: nginx:latest
    depends_on:
      - traefik
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.userapp.loadbalancer.server.port=80"
      - "traefik.http.routers.userapp.rule=Host(`test.example.com`)"
      - "traefik.http.routers.userapp.tls=${TLS}"
      - "traefik.http.routers.userapp.tls.certresolver=le"
      - "traefik.http.routers.userapp.entrypoints=${LISTEN}"
      - "traefik.http.routers.userapp.service=userapp"
      - "traefik.http.middlewares.testHeader.headers.customrequestheaders.X-Uitsmijter-Mode=interceptor"
      - "traefik.http.middlewares.uitsmijter-auth.forwardauth.address=${AUTHSERVER_URL}/interceptor"
      - "traefik.http.middlewares.uitsmijter-auth.forwardauth.trustForwardHeader=true"
      - "traefik.http.middlewares.uitsmijter-auth.forwardauth.authResponseHeaders=Authorization, X-User-Ident"
      - "traefik.http.routers.userapp.middlewares=uitsmijter-auth@docker"