You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
185 lines
6.3 KiB
185 lines
6.3 KiB
version: '2.3'
|
|
|
|
services:
|
|
|
|
traefik:
|
|
image: traefik:2.4
|
|
container_name: traefik
|
|
restart: always
|
|
command:
|
|
- "--accesslog.filepath=/var/log/access.log"
|
|
- "--log.level=WARNING"
|
|
- "--providers.docker=true"
|
|
- "--providers.docker.exposedbydefault=false"
|
|
- "--entrypoints.web.address=:80"
|
|
- "--entrypoints.websecure.address=:443"
|
|
- "--entrypoints.web.http.redirections.entryPoint.to=websecure"
|
|
- "--entrypoints.web.http.redirections.entryPoint.scheme=https"
|
|
- "--certificatesresolvers.myresolver.acme.httpchallenge=true"
|
|
- "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"
|
|
- "--certificatesresolvers.myresolver.acme.storage=/acme.json"
|
|
ports:
|
|
- 80:80
|
|
- 443:443
|
|
networks:
|
|
- proxy
|
|
volumes:
|
|
# - /opt/docker/overlays/traefik/var/log:/var/log/
|
|
- /opt/docker/overlays/traefik/acme.json:/acme.json
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
|
|
nextcloud-db:
|
|
image: mariadb
|
|
container_name: nextcloud-db
|
|
command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
|
|
restart: always
|
|
volumes:
|
|
- /opt/docker/overlays/nextcloud-db/mysql:/var/lib/mysql
|
|
environment:
|
|
- MYSQL_ROOT_PASSWORD=AAAAAAAAAAAAAAAAAAAAAAAMYSQLROOT
|
|
- MYSQL_PASSWORD=AAAAAAAAAAAAAAAAAAAAAAAAAAAAMYSQL
|
|
- MYSQL_DATABASE=nextcloud
|
|
- MYSQL_USER=nextcloud
|
|
networks:
|
|
- nextcloud
|
|
- sncf-db
|
|
ports:
|
|
- "127.0.0.1:3306:3306"
|
|
|
|
redis:
|
|
image: redis:alpine
|
|
container_name: nextcloud-redis
|
|
restart: always
|
|
command: redis-server --requirepass AAAAAAAAAAAAAAAAAAAAAAAAAAAAREDIS
|
|
networks:
|
|
- nextcloud
|
|
|
|
|
|
nextcloud:
|
|
image: nextcloud:e95023790cc36274053af7930831a9aecbf32efd
|
|
build: https://github.com/nextcloud/docker.git#e95023790cc36274053af7930831a9aecbf32efd:20.0/fpm-alpine
|
|
container_name: nextcloud
|
|
restart: always
|
|
volumes:
|
|
# - /opt/docker/overlays/nextcloud/var/log:/var/log
|
|
- /opt/docker/overlays/nextcloud/html:/var/www/html
|
|
- /opt/docker/overlays/nextcloud/data:/var/www/data
|
|
- /opt/docker/overlays/nextcloud/skeleton:/var/www/skeleton
|
|
environment:
|
|
- MYSQL_HOST=nextcloud-db
|
|
- REDIS_HOST=redis
|
|
- REDIS_HOST_PASSWORD=AAAAAAAAAAAAAAAAAAAAAAAAAAAAREDIS
|
|
- MYSQL_PASSWORD=AAAAAAAAAAAAAAAAAAAAAAAAAAAAMYSQL
|
|
- MYSQL_DATABASE=nextcloud
|
|
- MYSQL_USER=nextcloud
|
|
depends_on:
|
|
- nextcloud-db
|
|
- redis
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
networks:
|
|
- nextcloud
|
|
- nextcloud-web
|
|
|
|
nextcloud-web:
|
|
build: ../build/nextcloud-web
|
|
container_name: nextcloud-web
|
|
restart: always
|
|
volumes:
|
|
# - /opt/docker/overlays/nextcloud-web/var/log:/var/log
|
|
- /opt/docker/overlays/nextcloud/html:/var/www/html:ro
|
|
- /opt/docker/overlays/nextcloud/data:/var/www/data:ro
|
|
- /opt/docker/overlays/nextcloud/skeleton:/var/www/skeleton:ro
|
|
labels:
|
|
- traefik.docker.network=proxy
|
|
- traefik.enable=true
|
|
- traefik.protocol=http
|
|
- traefik.port=80
|
|
- traefik.http.routers.nextlcoud.tls=true
|
|
- traefik.http.routers.nextcloud.entrypoints=websecure
|
|
- traefik.http.routers.nextcloud.tls.certresolver=myresolver
|
|
- traefik.http.routers.nextcloud.rule=Host(`oleola.ddns.net`)
|
|
- traefik.http.middlewares.nextcloud.headers.customRequestHeaders.X-Forwarded-Proto=https
|
|
- traefik.http.routers.nextcloud.middlewares=nextcloud,nextcloud_redirect, next-auth
|
|
- traefik.http.middlewares.next-auth.basicauth.users=luca:$$2y$$05$$DnZh.HwnTfrmVhgrFdZ9bu86fyZ6/1HNRgaCTxOyrHGOFNFw5AYlm
|
|
- traefik.http.middlewares.nextcloud.headers.stsSeconds=155520011
|
|
- traefik.http.middlewares.nextcloud.headers.stsIncludeSubdomains=true
|
|
- traefik.http.middlewares.nextcloud.headers.stsPreload=true
|
|
- traefik.http.middlewares.nextcloud_redirect.redirectregex.regex=/.well-known/(card|cal)dav
|
|
- traefik.http.middlewares.nextcloud_redirect.redirectregex.replacement=/remote.php/dav/
|
|
depends_on:
|
|
- nextcloud
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
networks:
|
|
- nextcloud
|
|
- proxy
|
|
- nextcloud-web
|
|
# logging:
|
|
# driver: syslog
|
|
|
|
cron:
|
|
image: nextcloud:stable-fpm-alpine
|
|
restart: always
|
|
container_name: nextcloud-cron
|
|
volumes:
|
|
- /opt/docker/overlays/nextcloud/html:/var/www/html
|
|
- /opt/docker/overlays/nextcloud/data:/var/www/data
|
|
- /opt/docker/overlays/nextcloud/skeleton:/var/www/skeleton
|
|
entrypoint: /cron.sh
|
|
depends_on:
|
|
- nextcloud-db
|
|
- redis
|
|
networks:
|
|
- nextcloud
|
|
- proxy
|
|
|
|
# deb-rust-sncf:
|
|
# build: ../build/deb-rust-sncf
|
|
# container_name: deb-rust-sncf
|
|
# restart: always
|
|
# volumes:
|
|
## - /opt/docker/overlays/deb-rust-sncf/var/log:/var/log
|
|
# - /opt/docker/overlays/nextcloud/html:/var/www/html
|
|
# - /opt/docker/overlays/nextcloud/data:/var/www/data
|
|
# - /opt/docker/overlays/nextcloud/skeleton:/var/www/skeleton
|
|
# labels:
|
|
# - "traefik.docker.network=proxy"
|
|
# - "traefik.enable=true"
|
|
# - "traefik.protocol=http"
|
|
# - "traefik.port=8000"
|
|
# - "traefik.http.routers.deb-rust-sncf.entrypoints=websecure"
|
|
# - "traefik.http.routers.deb-rust-sncf.tls.certresolver=myresolver"
|
|
# - "traefik.http.routers.deb-rust-sncf.rule=Host(`example.org`)"
|
|
# - "traefik.http.services.deb-rust-sncf.loadbalancer.server.port=8000"
|
|
# - "traefik.http.routers.deb-rust-sncf.middlewares=sncf, sncf-auth"
|
|
# - "traefik.http.middlewares.sncf-auth.basicauth.users=luca:$$2y$$05$$DnZh.HwnTfrmVhgrFdZ9bu86fyZ6/1HNRgaCTxOyrHGOFNFw5AYlm"
|
|
# - "traefik.http.middlewares.sncf.headers.customRequestHeaders.X-Forwarded-Proto=https"
|
|
# - "traefik.http.middlewares.sncf.headers.stsSeconds=155520011"
|
|
# - "traefik.http.middlewares.sncf.headers.stsIncludeSubdomains=true"
|
|
# - "traefik.http.middlewares.sncf.headers.stsPreload=true"
|
|
# - "traefik.http.middlewares.sncf-ratelimit.ratelimit.average=200"
|
|
# environment:
|
|
# - RUST_BACKTRACE=full
|
|
# depends_on:
|
|
# - nextcloud
|
|
# networks:
|
|
# - sncf-db
|
|
# - sncf-nc
|
|
# - proxy
|
|
|
|
networks:
|
|
proxy:
|
|
external: true
|
|
nextcloud:
|
|
external: false
|
|
driver: bridge
|
|
nextcloud-web:
|
|
external: false
|
|
driver: bridge
|
|
sncf-nc:
|
|
external: false
|
|
driver: bridge
|
|
sncf-db:
|
|
external: false
|
|
driver: bridge
|