thopic
1b32cb3c24
https://cloud.gnous.fr/apps/deck/#/board/4/card/25 https://docs.mailcow.email/post_installation/firststeps-disable_ipv6/
59 lines
2.0 KiB
YAML
59 lines
2.0 KiB
YAML
version: '2.1'
|
|
services:
|
|
|
|
nginx-mailcow:
|
|
expose:
|
|
- "${HTTP_PORT:-80}"
|
|
networks:
|
|
proxy:
|
|
mailcow-network:
|
|
aliases:
|
|
- nginx
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.docker.network=proxy
|
|
- traefik.http.middlewares.mail-redirect-websecure.redirectscheme.scheme=https
|
|
- traefik.http.routers.mail-http.middlewares=mail-redirect-websecure
|
|
- traefik.http.routers.mail-http.rule=Host(`${MAILCOW_HOSTNAME}`)
|
|
- traefik.http.routers.mail-http.entrypoints=web
|
|
- traefik.http.routers.mail-https.rule=Host(`${MAILCOW_HOSTNAME}`)
|
|
- traefik.http.routers.mail-https.entrypoints=websecure
|
|
- traefik.http.routers.mail-https.tls=true
|
|
- traefik.http.routers.mail-https.tls.certresolver=myhttpchallenge
|
|
- traefik.http.services.mail.loadbalancer.server.port=80
|
|
- "co.elastic.logs/module=nginx"
|
|
- "co.elastic.logs/fileset=access"
|
|
|
|
certdumper:
|
|
image: humenius/traefik-certs-dumper
|
|
restart: always
|
|
# container_name: traefik_certdumper
|
|
network_mode: none
|
|
volumes:
|
|
# mount the folder which contains Traefik's `acme.json' file
|
|
# in this case Traefik is started from its own docker-compose in ../traefik
|
|
- ${DATA_PATH}/traefik:/traefik:ro
|
|
# mount mailcow's SSL folder
|
|
- ./data/assets/ssl/:/output:rw
|
|
environment:
|
|
# only change this, if you're using another domain for mailcow's web frontend compared to the standard config
|
|
- DOMAIN=${MAILCOW_HOSTNAME}
|
|
|
|
ipv6nat-mailcow:
|
|
image: bash:latest
|
|
restart: "no"
|
|
entrypoint: ["echo", "ipv6nat disabled in compose.override.yml"]
|
|
|
|
networks:
|
|
mailcow-network:
|
|
driver_opts:
|
|
com.docker.network.bridge.name: br-mailcow
|
|
enable_ipv6: false
|
|
ipam:
|
|
driver: default
|
|
config:
|
|
- subnet: ${IPV4_NETWORK:-172.22.1}.0/24
|
|
- subnet: ${IPV6_NETWORK:-fd4d:6169:6c63:6f77::/64}
|
|
proxy:
|
|
external: true
|