-
Notifications
You must be signed in to change notification settings - Fork 0
/
docker-compose.yml
89 lines (85 loc) · 2.52 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
services:
watchtower:
# watchtower checks for new pushes to the portfolio image
# and then pulls them automatically
# https://containrrr.dev/watchtower
image: containrrr/watchtower
command:
# https://containrrr.dev/watchtower/arguments
- "--label-enable"
- "--interval"
- "30"
# incrementally update the containers, instead of all at once
- "--rolling-restart"
volumes:
- /var/run/docker.sock:/var/run/docker.sock
traefik:
container_name: traefik
image: traefik:v3.1
command:
- "--api.insecure=true"
- "--providers.docker"
- "--providers.docker.exposedbydefault=false"
# TLS (https)
- "--entrypoints.websecure.address=:443"
- "--certificatesresolvers.myresolver.acme.tlschallenge=true"
- "--certificatesresolvers.myresolver.acme.email=saku.karttunen@gmail.com"
- "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
# http redirection
- "--entrypoints.web.address=:80"
- "--entrypoints.web.http.redirections.entrypoint.to=websecure"
- "--entrypoints.web.http.redirections.entrypoint.scheme=https"
# local development
# - "--entrypoints.web.address=:80"
ports:
- "80:80"
- "443:443"
# Web UI
- "8080:8080"
volumes:
# allow Traefik to listen for docker events
- /var/run/docker.sock:/var/run/docker.sock
# persist the ssl certificate
- letsencrypt:/letsencrypt
networks:
- default
depends_on:
- portfolio
portfolio:
image: ghcr.io/sakuexe/portfolio:prod
labels:
- "traefik.enable=true"
- "traefik.http.routers.dotnet.rule=Host(`fs.sakukarttunen.com`)"
- "traefik.http.routers.dotnet.entrypoints=websecure"
- "traefik.http.routers.dotnet.tls.certresolver=myresolver"
# local development
# - "traefik.http.routers.dotnet.rule=Host(`localhost`)"
# - "traefik.http.routers.dotnet.entrypoints=websecure"
# enable watchtower
- "com.centurylinklabs.watchtower.enable=true"
env_file: .env
depends_on:
- mongodb
volumes:
# maintains the files between container restarts
- uploaded_files:/App/wwwroot/uploads
networks:
- default
ports:
- "80"
- "443"
deploy:
replicas: 3 # adjust as needed
mongodb:
container_name: mongodb
image: mongo
volumes:
- mongodb_data:/data/db
networks:
- default
networks:
default:
volumes:
mongodb_data:
uploaded_files:
letsencrypt: