docker-compose.yaml aktualisiert
This commit is contained in:
+2
-9
@@ -6,7 +6,7 @@ services:
|
|||||||
security_opt:
|
security_opt:
|
||||||
- no-new-privileges:true
|
- no-new-privileges:true
|
||||||
command:
|
command:
|
||||||
- "--configFile=/etc/traefik/traefik.yml"
|
- "--configFile=/etc/traefik/traefik.yaml"
|
||||||
- "--log.level=INFO"
|
- "--log.level=INFO"
|
||||||
environment:
|
environment:
|
||||||
- DOCKER_API_VERSION=1.47
|
- DOCKER_API_VERSION=1.47
|
||||||
@@ -15,25 +15,18 @@ services:
|
|||||||
- "443:443"
|
- "443:443"
|
||||||
volumes:
|
volumes:
|
||||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||||
- /mnt/traefik:/etc/traefik
|
- /root/stacks/infra-traefik:/etc/traefik
|
||||||
networks:
|
networks:
|
||||||
- traefik-net
|
- traefik-net
|
||||||
labels:
|
labels:
|
||||||
- "traefik.enable=true"
|
- "traefik.enable=true"
|
||||||
# Dashboard Router - Korrigierte Syntax für Host-Regel
|
|
||||||
- "traefik.http.routers.dashboard.rule=Host(`traefik.ljh31.de`)"
|
- "traefik.http.routers.dashboard.rule=Host(`traefik.ljh31.de`)"
|
||||||
- "traefik.http.routers.dashboard.entrypoints=websecure"
|
- "traefik.http.routers.dashboard.entrypoints=websecure"
|
||||||
- "traefik.http.routers.dashboard.tls=true"
|
- "traefik.http.routers.dashboard.tls=true"
|
||||||
- "traefik.http.routers.dashboard.tls.certresolver=letsencrypt"
|
- "traefik.http.routers.dashboard.tls.certresolver=letsencrypt"
|
||||||
- "traefik.http.routers.dashboard.service=api@internal"
|
- "traefik.http.routers.dashboard.service=api@internal"
|
||||||
|
|
||||||
# Middleware Auswahl: Aktuell ist Basic Auth aktiv
|
|
||||||
- "traefik.http.routers.dashboard.middlewares=dashboard-auth"
|
- "traefik.http.routers.dashboard.middlewares=dashboard-auth"
|
||||||
|
|
||||||
# Basic Auth Definition
|
|
||||||
- "traefik.http.middlewares.dashboard-auth.basicauth.users=admin:$$apr1$$xyz$$..."
|
- "traefik.http.middlewares.dashboard-auth.basicauth.users=admin:$$apr1$$xyz$$..."
|
||||||
|
|
||||||
# Keycloak ForwardAuth Middleware (bereitgestellt, aber aktuell nicht im Router zugewiesen)
|
|
||||||
- "traefik.http.middlewares.keycloak-oauth2.forwardauth.address=http://<OAUTH2_PROXY_URL>/oauth2/auth"
|
- "traefik.http.middlewares.keycloak-oauth2.forwardauth.address=http://<OAUTH2_PROXY_URL>/oauth2/auth"
|
||||||
- "traefik.http.middlewares.keycloak-oauth2.forwardauth.trustForwardHeader=true"
|
- "traefik.http.middlewares.keycloak-oauth2.forwardauth.trustForwardHeader=true"
|
||||||
- "traefik.http.middlewares.keycloak-oauth2.forwardauth.authResponseHeaders=X-Auth-Request-User,X-Auth-Request-Email"
|
- "traefik.http.middlewares.keycloak-oauth2.forwardauth.authResponseHeaders=X-Auth-Request-User,X-Auth-Request-Email"
|
||||||
|
|||||||
Reference in New Issue
Block a user