122 lines
3.9 KiB
YAML
122 lines
3.9 KiB
YAML
version: '3.7'
|
|
|
|
services:
|
|
reverse-proxy:
|
|
container_name: reverse-proxy
|
|
image: traefik:v2.8
|
|
restart: on-failure
|
|
ports:
|
|
- ${NGINX_PORT-80}:80
|
|
- ${NGINX_PORT_SSL-443}:443
|
|
command: --providers.docker
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
- ${PWD}/traefik:/root/.config
|
|
- ${PWD}/traefik/shared:/shared
|
|
networks:
|
|
- tipi_main_network
|
|
|
|
tipi-db:
|
|
container_name: tipi-db
|
|
image: postgres:14
|
|
restart: on-failure
|
|
stop_grace_period: 1m
|
|
volumes:
|
|
- ${PWD}/data/postgres:/var/lib/postgresql/data
|
|
environment:
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
POSTGRES_USER: tipi
|
|
POSTGRES_DB: tipi
|
|
healthcheck:
|
|
test: ['CMD-SHELL', 'pg_isready -d tipi -U tipi']
|
|
interval: 5s
|
|
timeout: 10s
|
|
retries: 120
|
|
networks:
|
|
- tipi_main_network
|
|
|
|
tipi-redis:
|
|
container_name: tipi-redis
|
|
image: redis:alpine
|
|
restart: on-failure
|
|
volumes:
|
|
- ./data/redis:/data
|
|
healthcheck:
|
|
test: ['CMD', 'redis-cli', 'ping']
|
|
interval: 5s
|
|
timeout: 10s
|
|
retries: 120
|
|
networks:
|
|
- tipi_main_network
|
|
|
|
dashboard:
|
|
image: meienberger/runtipi:${TIPI_VERSION}
|
|
restart: on-failure
|
|
container_name: dashboard
|
|
networks:
|
|
- tipi_main_network
|
|
depends_on:
|
|
tipi-db:
|
|
condition: service_healthy
|
|
tipi-redis:
|
|
condition: service_healthy
|
|
environment:
|
|
NODE_ENV: production
|
|
INTERNAL_IP: ${INTERNAL_IP}
|
|
TIPI_VERSION: ${TIPI_VERSION}
|
|
JWT_SECRET: ${JWT_SECRET}
|
|
NGINX_PORT: ${NGINX_PORT}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
|
|
POSTGRES_USERNAME: ${POSTGRES_USERNAME}
|
|
POSTGRES_DBNAME: ${POSTGRES_DBNAME}
|
|
POSTGRES_HOST: ${POSTGRES_HOST}
|
|
APPS_REPO_ID: ${APPS_REPO_ID}
|
|
APPS_REPO_URL: ${APPS_REPO_URL}
|
|
DOMAIN: ${DOMAIN}
|
|
ARCHITECTURE: ${ARCHITECTURE}
|
|
REDIS_HOST: ${REDIS_HOST}
|
|
DEMO_MODE: ${DEMO_MODE}
|
|
LOCAL_DOMAIN: ${LOCAL_DOMAIN}
|
|
volumes:
|
|
- ${PWD}/.env:/runtipi/.env
|
|
- ${PWD}/state:/runtipi/state
|
|
- ${PWD}/repos:/runtipi/repos:ro
|
|
- ${PWD}/apps:/runtipi/apps
|
|
- ${PWD}/logs:/app/logs
|
|
- ${PWD}/traefik:/runtipi/traefik
|
|
- ${STORAGE_PATH}:/app/storage
|
|
labels:
|
|
# Main
|
|
traefik.enable: true
|
|
traefik.http.middlewares.redirect-to-https.redirectscheme.scheme: https
|
|
traefik.http.services.dashboard.loadbalancer.server.port: 3000
|
|
# Local ip
|
|
traefik.http.routers.dashboard.rule: PathPrefix("/")
|
|
traefik.http.routers.dashboard.service: dashboard
|
|
traefik.http.routers.dashboard.entrypoints: web
|
|
# Websecure
|
|
traefik.http.routers.dashboard-insecure.rule: Host(`${DOMAIN}`) && PathPrefix(`/`)
|
|
traefik.http.routers.dashboard-insecure.service: dashboard
|
|
traefik.http.routers.dashboard-insecure.entrypoints: web
|
|
traefik.http.routers.dashboard-insecure.middlewares: redirect-to-https
|
|
traefik.http.routers.dashboard-secure.rule: Host(`${DOMAIN}`) && PathPrefix(`/`)
|
|
traefik.http.routers.dashboard-secure.service: dashboard
|
|
traefik.http.routers.dashboard-secure.entrypoints: websecure
|
|
traefik.http.routers.dashboard-secure.tls.certresolver: myresolver
|
|
# Local domain
|
|
traefik.http.routers.dashboard-local-insecure.rule: Host(`${LOCAL_DOMAIN}`)
|
|
traefik.http.routers.dashboard-local-insecure.entrypoints: web
|
|
traefik.http.routers.dashboard-local-insecure.service: dashboard
|
|
traefik.http.routers.dashboard-local-insecure.middlewares: redirect-to-https
|
|
traefik.http.routers.dashboard-local.rule: Host(`${LOCAL_DOMAIN}`)
|
|
traefik.http.routers.dashboard-local.entrypoints: websecure
|
|
traefik.http.routers.dashboard-local.tls: true
|
|
traefik.http.routers.dashboard-local.service: dashboard
|
|
|
|
networks:
|
|
tipi_main_network:
|
|
driver: bridge
|
|
ipam:
|
|
driver: default
|
|
config:
|
|
- subnet: 10.21.21.0/24
|