diff --git a/docker/homepage/behind-proxy/compose.override.yaml b/docker/homepage/behind-proxy/compose.override.yaml index c6ea861..b42ca47 100644 --- a/docker/homepage/behind-proxy/compose.override.yaml +++ b/docker/homepage/behind-proxy/compose.override.yaml @@ -1,14 +1,55 @@ +secrets: + title: + file: /gurulandia/data/homepage/secrets/title services: - homepage: + homepage: + image: ghcr.io/gethomepage/homepage:latest + container_name: homepage + ports: + - 3000:3000 + volumes: + - /gurulandia/data/homepage:/app/config # Make sure your local config directory exists + - /var/run/docker.sock:/var/run/docker.sock:ro # (optional) For docker integrations + environment: + - PUID=1000 + - PGID=1000 + - HOMEPAGE_VAR_BASE="https://homepage.lab.gurulandia.eu/" + #- HOMEPAGE_VAR_TITLE="Gurulandia's Awesome Homepage" + - HOMEPAGE_FILE_TITLE=/run/secrets/title + networks: + - proxy + - socket_proxy labels: - - "traefik.enable=true" + traefik.enable: true ## HTTP Routers - - "traefik.http.routers.${HOMEPAGE_HOSTNAME}-rtr.entrypoints=https" - - "traefik.http.routers.${HOMEPAGE_HOSTNAME}-rtr.rule=Host(`${HOMEPAGE_HOSTNAME}.$DOMAINNAME1`)" + traefik.http.routers.homepage-rtr.entrypoints: https + traefik.http.routers.homepage-rtr.rule: Host(`homepage.lab.gurulandia.eu`) + ## Middlewares + #- "traefik.http.routers.${GOTIFY_HOST_NAME}-rtr.middlewares=chain-authelia@file" + traefik.http.routers.homepage-rtr.middlewares: chain-authentik@file + #traefik.http.routers.homepage-rtr.middlewares: chain-no-auth@file + ## HTTP Services + traefik.http.routers.homepage-rtr.service: homepage-svc + traefik.http.services.homepage-svc.loadbalancer.server.port: 3000 + secrets: + - title +networks: + proxy: + external: true + socket_proxy: + external: true + + +#services: +# homepage: +# labels: +# - "traefik.enable=true" + ## HTTP Routers +# - "traefik.http.routers.${HOMEPAGE_HOSTNAME}-rtr.entrypoints=https" +# - "traefik.http.routers.${HOMEPAGE_HOSTNAME}-rtr.rule=Host(`${HOMEPAGE_HOSTNAME}.$DOMAINNAME1`)" ## Middlewares # - "traefik.http.routers.${HOMEPAGE_HOSTNAME}-rtr.middlewares=chain-authelia@file" - - "traefik.http.routers.${HOMEPAGE_HOSTNAME}-rtr.middlewares=chain-no-auth@file" +# - "traefik.http.routers.${HOMEPAGE_HOSTNAME}-rtr.middlewares=chain-no-auth@file" ## HTTP Services - - "traefik.http.routers.${HOMEPAGE_HOSTNAME}-rtr.service=${HOMEPAGE_HOSTNAME}-svc" - - "traefik.http.services.${HOMEPAGE_HOSTNAME}-svc.loadbalancer.server.port=22300" - +# - "traefik.http.routers.${HOMEPAGE_HOSTNAME}-rtr.service=${HOMEPAGE_HOSTNAME}-svc" +# - "traefik.http.services.${HOMEPAGE_HOSTNAME}-svc.loadbalancer.server.port=22300" \ No newline at end of file diff --git a/docker/nginx/compose.yaml b/docker/nginx/compose.yaml new file mode 100644 index 0000000..1ac7302 --- /dev/null +++ b/docker/nginx/compose.yaml @@ -0,0 +1,35 @@ +services: + web: + image: nginx:latest + container_name: jimsgarage + volumes: + - /gurulandia/data/nginx/templates:/etc/nginx/templates + - /gurulandia/data/nginx/web:/usr/share/nginx/html + environment: + - NGINX_HOST=nginx.lab.gurulandia.eu + - NGINX_PORT=80 + ports: + - 8089:80 + labels: + - "traefik.enable=true" + #- "traefik.http.routers.nginx.entrypoints=http" + #- "traefik.http.routers.nginx.rule=Host(`nginx.jimsgarage.co.uk`)" + #- "traefik.http.middlewares.nginx-https-redirect.redirectscheme.scheme=https" + #- "traefik.http.routers.nginx.middlewares=nginx-https-redirect" + - "traefik.http.routers.nginx-secure.entrypoints=https" + - "traefik.http.routers.nginx-secure.rule=Host(`nginx.lab.gurulandia.eu`)" + #- "traefik.http.routers.nginx-secure.tls=true" + #- "traefik.http.routers.nginx-secure.service=nginx" + - "traefik.http.services.nginx.loadbalancer.server.port=80" + #- "traefik.http.routers.nginx-secure.middlewares=chain-no-auth@file" + #- "traefik.http.routers.nginx-secure.middlewares=chain-authentik@file" #add this to any container you want to use the Authentik web proxy + - "traefik.http.routers.nginx-secure.middlewares=middlewares-authentik@file" #add this to any container you want to use the Authentik web proxy + # - "traefik.docker.network=proxy" + networks: + proxy: + security_opt: + - no-new-privileges:true + +networks: + proxy: + external: true \ No newline at end of file