Beiträge von SirAdam2k

### Traefik
### docker-compose.yml
##START
version: '3.7'
services:
  traefik:
    image: traefik
    container_name: traefik
    restart: always
    networks:
      - web
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /share/CACHEDEV1_DATA/docker/traefik/traefik.yml:/traefik.yml:ro
      - /share/CACHEDEV1_DATA/docker/traefik/middleware.yml:/middleware.yml:ro
      - /share/CACHEDEV1_DATA/docker/shared/.htpasswd:/.htpasswd:ro
      - /share/CACHEDEV1_DATA/docker/traefik/acme/acme.json:/acme.json
      - /share/CACHEDEV1_DATA/docker/traefik/traefik.log:/traefik.log
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.entrypoints=http"
      - "traefik.http.routers.traefik.rule=Host(`xxx.chickenkiller.com`) && PathPrefix(`/traefik`)"
      - "traefik.http.middlewares.traefik-auth.basicauth.usersfile=.htpasswd"
      - "traefik.http.routers.traefik.middlewares=https-redirect@file"
      - "traefik.http.routers.traefik-sec.entrypoints=https"
      - "traefik.http.routers.traefik-sec.rule=Host(`xxx.chickenkiller.com`) && PathPrefix(`/traefik`)"
      - "traefik.http.routers.traefik-sec.middlewares=traefik-auth"
      - "traefik.http.routers.traefik-sec.tls=true"
      - "traefik.http.routers.traefik-sec.tls.options=myTLSOptions@file"
      - "traefik.http.routers.traefik-sec.tls.certresolver=le"
      - "traefik.http.routers.traefik-sec.service=api@internal"
    environment:
      - TZ="Europe/Amsterdam"
networks:
  web:
    external: true
##EOF

##START
http:
  middlewares:
    https-redirect:
      redirectScheme:
        scheme: https
    default-headers:
      headers:
        CustomFrameOptionsValue: "SAMEORIGIN"
        sslRedirect: true
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        stsSeconds: 315360000
        stsIncludeSubdomains: true
        stsPreload: true
tls:
  options:
    myTLSOptions:
       minVersion: VersionTLS12
##EOF

##START
global:
  checkNewVersion: true
  sendAnonymousUsage: true
api:
  dashboard: true
  debug: true
log:
### Default Level ist ERROR. Alternative Log-Leven lauten DEBUG, PANIC, FATAL, ERROR, WARN, and INFO
  level: DEBUG
  filePath: "/traefik.log"
entryPoints:
  http:
    address: ":80"
  https:
    address: ":443"
providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    network: web
    exposedByDefault: false
  file:
    filename: /middleware.yml
certificatesResolvers:
  le:
    acme:
      email: xxx@gmail.com
      storage: acme.json
      tlsChallenge: {}
##EOF