Traefik docker-compose Solution #2

New Issue

luke-else · 2022-10-28T13:49:20Z

luke-else commented

2022-10-28 13:49:20 +00:00

Traefik container has...
command:
## General Settings ##
- --api.insecure=true
- --api.dashboard=true
- --api.debug=true

  ## Log Settings ##      
  - --log.level=DEBUG # <== Setting the level of the logs from traefik

  ## Provider Settings ##
  - --providers.docker=true
  - --providers.docker.exposedbydefault=false
  - --providers.file.filename=/dynamic.yaml

  ## Entrypoints Settings ##
  - --entrypoints.http.address=:80
  - --entrypoints.https.address=:443

  ## Certificate Settings ##
  - --certificatesresolvers.mytlschallenge.acme.tlschallenge=true
  - --certificatesresolvers.mytlschallenge.acme.email=contact@luke-else.co.uk
  - --certificatesresolvers.mytlschallenge.acme.storage=/letsencrypt/acme.json

volumes:
- ./letsencrypt:/letsencrypt
- /var/run/docker.sock:/var/run/docker.sock
- ./dynamic.yaml:/dynamic.yaml
labels:
## Exposing API Dashboard Service ##
- "traefik.enable=true"
- "traefik.http.routers.api.rule=Host(monitor.example.com)"
- "traefik.http.routers.api.service=api@internal"

Each child container has

labels:
## Expose ... Through Trefik ##
- "traefik.enable=true" # <== Enable traefik to proxy this container
- "traefik.http.routers.containername.rule=Host(example.com)"
- "traefik.http.routers.containername.entrypoints=http"
- "traefik.http.routers.containername.middlewares=redirect@file"

  - "traefik.http.routers.containername-secured.rule=Host(`example.com`)"
  - "traefik.http.routers.containername-secured.entrypoints=https"
  - "traefik.http.routers.containername-secured.tls.certresolver=mytlschallenge"

Traefik container has... command: ## General Settings ## - --api.insecure=true - --api.dashboard=true - --api.debug=true ## Log Settings ## - --log.level=DEBUG # <== Setting the level of the logs from traefik ## Provider Settings ## - --providers.docker=true - --providers.docker.exposedbydefault=false - --providers.file.filename=/dynamic.yaml ## Entrypoints Settings ## - --entrypoints.http.address=:80 - --entrypoints.https.address=:443 ## Certificate Settings ## - --certificatesresolvers.mytlschallenge.acme.tlschallenge=true - --certificatesresolvers.mytlschallenge.acme.email=contact@luke-else.co.uk - --certificatesresolvers.mytlschallenge.acme.storage=/letsencrypt/acme.json volumes: - ./letsencrypt:/letsencrypt - /var/run/docker.sock:/var/run/docker.sock - ./dynamic.yaml:/dynamic.yaml labels: ## Exposing API Dashboard Service ## - "traefik.enable=true" - "traefik.http.routers.api.rule=Host(`monitor.example.com`)" - "traefik.http.routers.api.service=api@internal" Each child container has labels: ## Expose ... Through Trefik ## - "traefik.enable=true" # <== Enable traefik to proxy this container - "traefik.http.routers.containername.rule=Host(`example.com`)" - "traefik.http.routers.containername.entrypoints=http" - "traefik.http.routers.containername.middlewares=redirect@file" - "traefik.http.routers.containername-secured.rule=Host(`example.com`)" - "traefik.http.routers.containername-secured.entrypoints=https" - "traefik.http.routers.containername-secured.tls.certresolver=mytlschallenge"

luke-else commented

2022-10-31 21:43:06 +00:00

All relevant containers now depend on Trafik as a container

They also are all on their own separate network... unless they require to share

All relevant containers now depend on Trafik as a container They also are all on their own separate network... unless they require to share

luke-else commented

2022-11-15 22:53:47 +00:00

Containers unable to see Traefik, depends-on can be removed as script now spins containers in the correct order.