Gnous/docker
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add websecure entrypoint to services + fix some middlewares issues

Browse Source
This commit is contained in:
thopic 2023-02-06 12:32:05 +01:00
parent ba72e0d277
commit 5df1851afd
Signed by: thopic
GPG Key ID: 292DBBF0B54AD4C5
12 changed files with 16 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
apaches/docker-compose.yml
View File

@ -16,6 +16,7 @@ services:
- ${DATA_PATH}:/var/www/
labels:
- "traefik.enable=true"
- "traefik.http.routers.gnousweb.entrypoints=websecure"
- "traefik.http.routers.gnousweb.rule=Host(`${CN}`, `${SAN1}`)"
# - "traefik.http.routers.gnousweb.rule=Host(`${CN}`, `${SAN1}`, `${TRAVAUXCN}`)"
- "traefik.http.middlewares.gnousweb-force-cn.redirectregex.regex=^https://${SAN1}/(.*)"

1
apaches/maintenance/docker-compose.yml
View File

@ -16,6 +16,7 @@ services:
- ${DATA_PATH}/public-html:/var/www/html/
labels:
- "traefik.enable=true"
- "traefik.http.routers.maintenance.entrypoints=websecure"
- "traefik.http.routers.maintenance.rule=HostRegexp(`{catchall:.*}`)"
- "traefik.http.routers.maintenance.priority=1"
- "co.elastic.logs/module=apache"

1
apaches/testing/docker-compose.yml
View File

@ -16,6 +16,7 @@ services:
- ${DATA_PATH}:/var/www/
labels:
- "traefik.enable=true"
- "traefik.http.routers.gnouswebtest.entrypoints=websecure"
- "traefik.http.routers.gnouswebtest.rule=Host(`${CN}`, `${SAN1}`)"
- "traefik.http.routers.gnouswebtest.middlewares=gnouswebtest-redirectregex"
- "traefik.http.middlewares.gnouswebtest-redirectregex.redirectregex.regex=^https://${SAN1}/(.*)"

1
elastic/docker-compose.yml
View File

@ -38,6 +38,7 @@ services:
labels:
- "traefik.enable=true"
- "traefik.docker.network=proxy"
- "traefik.http.routers.kb.entrypoints=websecure"
- "traefik.http.routers.kb.rule=Host(`${CN}`)"
- "co.elastic.logs/module=kibana"

1
gitea/docker-compose.yml
View File

@ -29,6 +29,7 @@ services:
- "traefik.docker.network=proxy"
- "traefik.http.services.gitea-svc.loadbalancer.server.port=3000"
- "traefik.http.routers.gitea.service=gitea-svc"
- "traefik.http.routers.gitea.entrypoints=websecure"
- "traefik.http.routers.gitea.rule=Host(`${CN}`)"
db:

1
gitlab/docker-compose.yml
View File

@ -23,6 +23,7 @@ services:
- "traefik.enable=true"
- "traefik.http.routers.gitlab.service=app"
- "traefik.http.services.app.loadbalancer.server.port=80"
- "traefik.http.routers.gitlab.entrypoints=websecure"
- "traefik.http.routers.gitlab.rule=Host(`${CN}`)"
networks:

1
matrix/docker-compose.yml
View File

@ -29,6 +29,7 @@ services:
- "traefik.docker.network=proxy"
- "traefik.http.services.synapse-svc.loadbalancer.server.port=8008"
- "traefik.http.routers.synapse.service=synapse-svc"
- "traefik.http.routers.synapse.entrypoints=websecure"
- "traefik.http.routers.synapse.rule=Host(`${SYNAPSE_CN}`)"
db:

1
mattermost/docker-compose.yml
View File

@ -32,6 +32,7 @@ services:
- "traefik.docker.network=proxy"
- "traefik.http.services.mm-svc.loadbalancer.server.port=8000"
- "traefik.http.routers.mm.service=mm-svc"
- "traefik.http.routers.mm.entrypoints=websecure"
- "traefik.http.routers.mm.rule=Host(`${CN}`)"
networks:

9
nextcloud/docker-compose.yml
View File

@ -11,9 +11,10 @@ services:
- JWT_ENABLED=true
labels:
- "traefik.enable=true"
- "traefik.http.routers.documentserver.entrypoints=websecure"
- "traefik.http.routers.documentserver.rule=Host(`${OOCN}`)"
- "traefik.http.middlewares.ds-header.headers.customRequestHeaders.X-Forwarded-Proto=https"
- "traefik.http.routers.documentserver.middlewares=ds-header"
- "traefik.http.routers.documentserver.middlewares=ds-header,allowFrameAndCORS@file"
redis:
image: redis:6.2.1
@ -56,13 +57,13 @@ services:
labels:
- "traefik.enable=true"
- "traefik.docker.network=proxy"
- "traefik.http.routers.nc.entrypoints=websecure"
- "traefik.http.routers.nc.rule=Host(`${NCCN}`,`${SAN1}`)"
- "traefik.http.middlewares.nc-redirectregex.redirectregex.regex=https://(.*)/.well-known/(card|cal)dav"
- "traefik.http.middlewares.nc-redirectregex.redirectregex.replacement=https://$${1}/remote.php/dav/"
- "traefik.http.middlewares.nc-redirectregex.redirectregex.permanent=true"
- "traefik.http.routers.nc.middlewares=nc-redirectregex"
- "traefik.http.routers.nc.middlewares=nc-Header"
- "traefik.http.middlewares.nc-Header.headers.stsSeconds=15552000"
- "traefik.http.routers.nc.middlewares=nc-redirectregex,nc-sts"
- "traefik.http.middlewares.nc-sts.headers.stsSeconds=15552000"
- "co.elastic.logs/module=apache"
- "co.elastic.logs/fileset=access"

1
nginxs/docs/docker-compose.yml
View File

@ -15,6 +15,7 @@ services:
- /etc/timezone:/etc/timezone:ro
labels:
- "traefik.enable=true"
- "traefik.http.routers.docs.entrypoints=websecure"
- "traefik.http.routers.docs.rule=Host(`${CN}`)"
- "co.elastic.logs/module=nginx"

1
roundcube/docker-compose.yml
View File

@ -24,6 +24,7 @@ services:
labels:
- "traefik.enable=true"
- "traefik.docker.network=proxy"
- "traefik.http.routers.rc.entrypoints=websecure"
- "traefik.http.routers.rc.rule=Host(`${CN}`)"
- "co.elastic.logs/module=apache"
- "co.elastic.logs/fileset=access"

1
wordpress-valpo/docker-compose.yml
View File

@ -26,6 +26,7 @@ services:
labels:
- "traefik.enable=true"
- "traefik.docker.network=proxy"
- "traefik.http.routers.wp-valpo.entrypoints=websecure"
- "traefik.http.routers.wp-valpo.rule=Host(`${CN}`)"
networks: