-
Notifications
You must be signed in to change notification settings - Fork 5
/
Copy pathdocker-compose.yml
79 lines (75 loc) · 2.49 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
version: '3'
services:
traefik:
image: traefik:v2.2
container_name: traefik
command:
- "--api.dashboard=false"
- "--providers.docker.exposedbydefault=true"
- "--providers.docker=true"
- "--entryPoints.web.address=:80"
- "--entryPoints.websecure.address=:443"
- "--providers.file.filename=/https.yaml" # <== http redirect to https
- "--certificatesresolvers.mytlschallenge.acme.tlschallenge=true" # <== Enable TLS-ALPN-01 to generate and renew ACME certs
- "--certificatesresolvers.mytlschallenge.acme.email=example@email.com" # <== Setting email for certs
- "--certificatesresolvers.mytlschallenge.acme.storage=/letsencrypt/acme.json"
restart: always
ports:
- "80:80"
- "443:443"
- "8080:8080"
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- ./letsencrypt:/letsencrypt
- ./https.yaml:/https.yaml
labels:
- "traefik.enable=true"
- "traefik.docker.network=web"
- "traefik.port=8085"
networks:
- web
web:
build: ./
container_name: blog
tty: true
command: sh /files/run.sh
volumes:
- ./blog/:/var/www/html
- ./docker_init/:/files
- ./apache_conf/:/etc/apache2/sites-available
ports:
- "8084:80"
stdin_open: true
tty: true
restart: always
labels:
- "traefik.enable=true"
- "traefik.http.routers.apache2.rule=Host(`website.com`)"
- "traefik.docker.network=web"
- "traefik.port=8084"
- "traefik.http.routers.apache2.middlewares=redirect@file" # <== Defining certsresolvers for https- "traefik.default.protocol=http"
- "traefik.http.routers.apache2-secured.rule=Host(`website.com`)" # <== Your Domain Name for the https rule
- "traefik.http.routers.apache2-secured.entrypoints=websecure" # <== Defining entrypoint for https, **ref: line 31
- "traefik.http.routers.apache2-secured.tls.certresolver=mytlschallenge" # <== Defining certsresolvers for https- "traefik.default.protocol=http"
depends_on:
- db
networks:
- web
db:
image: mysql
container_name: blogdb
command: --default-authentication-plugin=mysql_native_password
restart: always
networks:
- web
volumes:
- ./db/:/var/lib/mysql
- ./db_init/:/docker-entrypoint-initdb.d
environment:
- MYSQL_ROOT_PASSWORD=root_password
- MYSQL_DATABASE=blog
- MYSQL_USER=mysql_username
- MYSQL_PASSWORD=mysql_password
networks:
web:
external: true