mirror of
https://gitlab.com/psuapp/psu.git
synced 2024-08-30 18:12:34 +00:00
52 lines
1.4 KiB
YAML
52 lines
1.4 KiB
YAML
version: '3.7'
|
|
|
|
services:
|
|
portainer:
|
|
image: ${PORTAINER_IMAGE}:${PORTAINER_VERSION}
|
|
command: --admin-password-file '/run/secrets/psu-portainer-password'${PORTAINER_COMMAND_OPTIONS}
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.docker.network=psu-traefik-net
|
|
# HTTPS route
|
|
- "traefik.http.routers.portainer.entrypoints=https"
|
|
- "traefik.http.routers.portainer.rule=Host(`portainer.$BASE_DOMAIN`)"
|
|
- "traefik.http.routers.portainer.tls=true"
|
|
- traefik.http.middlewares.retry-if-fails.retry.attempts=10
|
|
- traefik.http.middlewares.https-only.redirectscheme.scheme=https
|
|
- traefik.http.middlewares.secured.chain.middlewares=retry-if-fails,https-only
|
|
- traefik.http.routers.portainer.middlewares=secured
|
|
# Service
|
|
- traefik.http.services.portainer.loadbalancer.server.port=9000
|
|
networks:
|
|
- psu-traefik-net
|
|
environment:
|
|
- HTTP_PROXY
|
|
- HTTPS_PROXY
|
|
- http_proxy
|
|
- https_proxy
|
|
- NO_PROXY
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- psu-portainer:/data
|
|
secrets:
|
|
- psu-portainer-password
|
|
deploy:
|
|
placement:
|
|
constraints:
|
|
- node.role == manager
|
|
update_config:
|
|
parallelism: 1
|
|
delay: 10s
|
|
|
|
networks:
|
|
psu-traefik-net:
|
|
driver: overlay
|
|
external: true
|
|
|
|
secrets:
|
|
psu-portainer-password:
|
|
external: true
|
|
|
|
volumes:
|
|
psu-portainer:
|