You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
57 lines
2.0 KiB
57 lines
2.0 KiB
version: "2.4" |
|
|
|
volumes: |
|
traefik-letsencrypt: |
|
traefik-tmp: |
|
|
|
services: |
|
|
|
traefik: |
|
image: traefik:2.6 |
|
container_name: traefik |
|
restart: unless-stopped |
|
logging: |
|
options: |
|
max-size: 10m |
|
ports: |
|
- 80:80 |
|
- 443:443 |
|
networks: |
|
- network |
|
volumes: |
|
- /var/run/docker.sock:/var/run/docker.sock:ro |
|
- traefik-tmp:/tmp |
|
- traefik-letsencrypt:/etc/traefik/acme |
|
- ./traefik/tls.yaml:/etc/traefik/tls.yaml:ro |
|
command: |
|
- --global.sendAnonymousUsage |
|
- --accesslog=true |
|
- --api=false |
|
- --providers.docker=true |
|
- --providers.docker.exposedByDefault=false |
|
- --log.level=INFO |
|
- --entryPoints.http.address=:80 |
|
- --entryPoints.https.address=:443 |
|
- --entryPoints.http.http.redirections.entryPoint.to=https |
|
- --entryPoints.http.http.redirections.entryPoint.scheme=https |
|
- --certificatesResolvers.letsEncrypt.acme.storage=/etc/traefik/acme/acme.json |
|
- --certificatesResolvers.letsEncrypt.acme.email=${ADMIN_EMAIL} |
|
- --certificatesResolvers.letsEncrypt.acme.tlsChallenge=true |
|
- --providers.file.filename=/etc/traefik/tls.yaml |
|
labels: |
|
- traefik.enable=false |
|
|
|
freshrss: |
|
labels: |
|
- traefik.enable=true |
|
- traefik.http.middlewares.freshrssM1.compress=true |
|
- traefik.http.middlewares.freshrssM2.headers.browserXssFilter=true |
|
- traefik.http.middlewares.freshrssM2.headers.forceSTSHeader=true |
|
- traefik.http.middlewares.freshrssM2.headers.frameDeny=true |
|
- traefik.http.middlewares.freshrssM2.headers.referrerPolicy=no-referrer-when-downgrade |
|
- traefik.http.middlewares.freshrssM2.headers.stsSeconds=31536000 |
|
- traefik.http.routers.freshrss.entryPoints=https |
|
- traefik.http.routers.freshrss.middlewares=freshrssM1,freshrssM2 |
|
- traefik.http.routers.freshrss.rule=Host(`${SERVER_DNS}`) |
|
- traefik.http.routers.freshrss.tls.certResolver=letsEncrypt |
|
- traefik.http.routers.freshrss.tls=true
|
|
|