infrastructure/ansible/roles/upload/files/docker-compose.yml
Jake Howard d5c7d94ac8
Run traefik as dockeruser, and without host networking
This required port forwarding, a docker proxy, and a docker network, but the end result should be much more secure!
2022-01-15 23:44:06 +00:00

65 lines
1.5 KiB
YAML

version: "2.3"
services:
webdav:
image: ghcr.io/realorangeone/webdav:latest
restart: unless-stopped
volumes:
- ./files:/srv
- ./htpasswd.txt:/etc/nginx/.htpasswd:ro
environment:
- PUID={{ docker_user.id }}
labels:
- traefik.enable=true
- traefik.http.routers.upload.rule=Host(`upload.theorangeone.net`)
networks:
- default
- traefik
img:
image: ghcr.io/realorangeone/static-server:latest
restart: unless-stopped
volumes:
- ./files/img:/srv:ro
environment:
- PUID={{ docker_user.id }}
labels:
- traefik.enable=true
- traefik.http.routers.img.rule=Host(`img.theorangeone.net`) || Host(`img.0rng.one`)
networks:
- default
- traefik
bg:
image: ghcr.io/realorangeone/static-server:latest
restart: unless-stopped
volumes:
- ./files/bg:/srv:ro
environment:
- FANCY_INDEX=on
- PUID={{ docker_user.id }}
labels:
- traefik.enable=true
- traefik.http.routers.bg.rule=Host(`bg.theorangeone.net`)
networks:
- default
- traefik
dl:
image: ghcr.io/realorangeone/static-server:latest
restart: unless-stopped
volumes:
- ./files/dl:/srv:ro
environment:
- PUID={{ docker_user.id }}
labels:
- traefik.enable=true
- traefik.http.routers.dl.rule=Host(`dl.theorangeone.net`) || Host(`dl.0rng.one`)
networks:
- default
- traefik
networks:
traefik:
external: true