infrastructure/ansible/roles/pve_docker/files/whoami/docker-compose.yml

services:
  whoami:
    image: traefik/whoami:latest
    restart: unless-stopped
    labels:
      - traefik.enable=true
      - traefik.http.routers.whoami.rule=Host(`whoami.theorangeone.net`) || Host(`whoami-cdn.theorangeone.net`)

      - traefik.http.routers.whoami-private.rule=Host(`whoami-private.theorangeone.net`)
      - traefik.http.routers.whoami-private.middlewares=tailscale-only@file
    networks:
      - default
      - traefik

networks:
  traefik:
    external: true
Add whoami 2020-01-30 13:20:31 +00:00			`services:`
			`whoami:`
Use new whoami container 2020-10-22 19:07:33 +01:00			`image: traefik/whoami:latest`
Add whoami 2020-01-30 13:20:31 +00:00			`restart: unless-stopped`
			`labels:`
Update yamllint 2020-06-18 20:49:12 +01:00			`- traefik.enable=true`
Add the basics of some edge caching 2024-02-21 21:42:16 +00:00			- traefik.http.routers.whoami.rule=Host(`whoami.theorangeone.net`) \|\| Host(`whoami-cdn.theorangeone.net`)
Allow only exposing services over Tailscale This works using public DNS, so doesn't need Tailscale's magic DNS to override my local. 2024-03-07 22:30:10 +00:00
			- traefik.http.routers.whoami-private.rule=Host(`whoami-private.theorangeone.net`)
			`- traefik.http.routers.whoami-private.middlewares=tailscale-only@file`
Run traefik as dockeruser, and without host networking This required port forwarding, a docker proxy, and a docker network, but the end result should be much more secure! 2022-01-15 23:44:06 +00:00			`networks:`
			`- default`
			`- traefik`

			`networks:`
			`traefik:`
			`external: true`