72 lines
1.9 KiB
YAML
72 lines
1.9 KiB
YAML
|
version: "3.7"
|
||
|
|
|
||
|
|
services:
|
||
|
|
nginx:
|
||
|
|
image: docker.io/nginxproxy/nginx-proxy:latest
|
||
|
|
container_name: nginx
|
||
|
|
networks:
|
||
|
|
- internal_network
|
||
|
|
- external_network
|
||
|
|
dns:
|
||
|
|
- 89.32.32.32
|
||
|
|
ports:
|
||
|
|
- "80:80"
|
||
|
|
- "443:443"
|
||
|
|
labels:
|
||
|
|
com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy: "true"
|
||
|
|
volumes:
|
||
|
|
- /opt/portal/nginx/certs:/etc/nginx/certs:ro
|
||
|
|
- /opt/portal/nginx/conf:/etc/nginx/conf.d
|
||
|
|
- /opt/portal/nginx/dhparam:/etc/nginx/dhparam
|
||
|
|
- /opt/portal/nginx/html:/usr/share/nginx/html
|
||
|
|
- /opt/portal/nginx/vhost:/etc/nginx/vhost.d
|
||
|
|
- /var/run/docker.sock:/tmp/docker.sock:ro
|
||
|
|
environment:
|
||
|
|
- ENABLE_IPV6=true
|
||
|
|
restart: unless-stopped
|
||
|
|
|
||
|
|
acme:
|
||
|
|
image: docker.io/nginxproxy/acme-companion:latest
|
||
|
|
container_name: acme
|
||
|
|
networks:
|
||
|
|
- external_network
|
||
|
|
dns:
|
||
|
|
- 89.32.32.32
|
||
|
|
volumes:
|
||
|
|
- /opt/portal/nginx/acme:/etc/acme.sh
|
||
|
|
- /opt/portal/nginx/certs:/etc/nginx/certs:rw
|
||
|
|
- /opt/portal/nginx/conf:/etc/nginx/conf.d
|
||
|
|
- /opt/portal/nginx/dhparam:/etc/nginx/dhparam
|
||
|
|
- /opt/portal/nginx/html:/usr/share/nginx/html
|
||
|
|
- /opt/portal/nginx/vhost:/etc/nginx/vhost.d:rw
|
||
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||
|
|
environment:
|
||
|
|
- NGINX_PROXY_CONTAINER=nginx
|
||
|
|
- DEFAULT_EMAIL=noc@sunet.se
|
||
|
|
depends_on:
|
||
|
|
- nginx
|
||
|
|
restart: unless-stopped
|
||
|
|
|
||
|
|
portal:
|
||
|
|
image: docker.sunet.se/drive/portal:<%= @portal_version %>
|
||
|
|
container_name: portal
|
||
|
|
restart: always
|
||
|
|
networks:
|
||
|
|
- internal_network
|
||
|
|
ports:
|
||
|
|
- "127.0.0.1:8080:8080"
|
||
|
|
dns:
|
||
|
|
- 89.32.32.32
|
||
|
|
volumes:
|
||
|
|
- /opt/portal/config.yaml:/app/config.yaml
|
||
|
|
environment:
|
||
|
|
- VIRTUAL_HOST=portal/<%= @domain %>
|
||
|
|
- VIRTUAL_PATH=/
|
||
|
|
- VIRTUAL_PORT=8080
|
||
|
|
- LETSENCRYPT_HOST=portal.<%= @domain %>
|
||
|
|
|
||
|
|
networks:
|
||
|
|
external_network:
|
||
|
|
internal_network:
|
||
|
|
internal: true
|