Created
December 5, 2019 14:14
-
-
Save ohnotnow/28967655f24f5e4fbc662e04e5d1b3fc to your computer and use it in GitHub Desktop.
Test traefik v2 docker swarm stack file
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
version: "3.3" | |
services: | |
################################################ | |
#### Traefik Proxy Setup ##### | |
############################################### | |
traefik: | |
image: traefik:v2.0 | |
restart: always | |
container_name: traefik | |
ports: | |
- "80:80" # <== http | |
- "8080:8080" # <== :8080 is where the dashboard runs on | |
- "443:443" # <== https | |
command: | |
#### These are the CLI commands that will configure Traefik and tell it how to work! #### | |
## API Settings - https://docs.traefik.io/operations/api/, endpoints - https://docs.traefik.io/operations/api/#endpoints ## | |
- --api.insecure=true # <== Enabling insecure api, NOT RECOMMENDED FOR PRODUCTION | |
- --api.dashboard=true # <== Enabling the dashboard to view services, middlewares, routers, etc... | |
- --api.debug=true # <== Enabling additional endpoints for debugging and profiling | |
## Log Settings (options: ERROR, DEBUG, PANIC, FATAL, WARN, INFO) - https://docs.traefik.io/observability/logs/ ## | |
- --log.level=DEBUG # <== Setting the level of the logs from traefik | |
## Provider Settings - https://docs.traefik.io/providers/docker/#provider-configuration ## | |
- --providers.docker=true # <== Enabling docker as the provider for traefik | |
- --providers.docker.swarmMode=true | |
- --providers.docker.exposedbydefault=false # <== Don't expose every container to traefik, only expose enabled ones | |
# - --providers.file.filename=/dynamic.yaml # <== Referring to a dynamic configuration file | |
- --providers.docker.network=proxy # <== Operate on the docker network named web | |
## Entrypoints Settings - https://docs.traefik.io/routing/entrypoints/#configuration ## | |
- --entrypoints.web.address=:80 # <== Defining an entrypoint for port :80 named web | |
- --entrypoints.web-secured.address=:443 # <== Defining an entrypoint for https on port :443 named web-secured | |
## Certificate Settings (Let's Encrypt) - https://docs.traefik.io/https/acme/#configuration-examples ## | |
# - --certificatesresolvers.mytlschallenge.acme.tlschallenge=true # <== Enable TLS-ALPN-01 to generate and renew ACME certs | |
# - --certificatesresolvers.mytlschallenge.acme.email=theafkdeveloper@gmail.com # <== Setting email for certs | |
# - --certificatesresolvers.mytlschallenge.acme.storage=/letsencrypt/acme.json # <== Defining acme file to store cert information | |
volumes: | |
- letsencrypt:/letsencrypt # <== Volume for certs (TLS) | |
- /var/run/docker.sock:/var/run/docker.sock # <== Volume for docker admin | |
# - ./dynamic.yaml:/dynamic.yaml # <== Volume for dynamic conf file, **ref: line 27 | |
networks: | |
- proxy # <== Placing traefik on the network named web, to access containers on this network | |
labels: | |
#### Labels define the behavior and rules of the traefik proxy for this container #### | |
- "traefik.enable=true" # <== Enable traefik on itself to view dashboard and assign subdomain to view it | |
- "traefik.http.routers.api.rule=Host(`traefik.yoursite.com`)" # <== Setting the domain for the dashboard | |
- "traefik.http.routers.api.service=api@internal" # <== Enabling the api to be a service to access | |
networks: | |
proxy: | |
external: true | |
volumes: | |
letsencrypt: | |
external: true |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment