docker-compose.yaml aktualisiert
This commit is contained in:
+2
-9
@@ -6,7 +6,7 @@ services:
|
||||
security_opt:
|
||||
- no-new-privileges:true
|
||||
command:
|
||||
- "--configFile=/etc/traefik/traefik.yml"
|
||||
- "--configFile=/etc/traefik/traefik.yaml"
|
||||
- "--log.level=INFO"
|
||||
environment:
|
||||
- DOCKER_API_VERSION=1.47
|
||||
@@ -15,25 +15,18 @@ services:
|
||||
- "443:443"
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||
- /mnt/traefik:/etc/traefik
|
||||
- /root/stacks/infra-traefik:/etc/traefik
|
||||
networks:
|
||||
- traefik-net
|
||||
labels:
|
||||
- "traefik.enable=true"
|
||||
# Dashboard Router - Korrigierte Syntax für Host-Regel
|
||||
- "traefik.http.routers.dashboard.rule=Host(`traefik.ljh31.de`)"
|
||||
- "traefik.http.routers.dashboard.entrypoints=websecure"
|
||||
- "traefik.http.routers.dashboard.tls=true"
|
||||
- "traefik.http.routers.dashboard.tls.certresolver=letsencrypt"
|
||||
- "traefik.http.routers.dashboard.service=api@internal"
|
||||
|
||||
# Middleware Auswahl: Aktuell ist Basic Auth aktiv
|
||||
- "traefik.http.routers.dashboard.middlewares=dashboard-auth"
|
||||
|
||||
# Basic Auth Definition
|
||||
- "traefik.http.middlewares.dashboard-auth.basicauth.users=admin:$$apr1$$xyz$$..."
|
||||
|
||||
# Keycloak ForwardAuth Middleware (bereitgestellt, aber aktuell nicht im Router zugewiesen)
|
||||
- "traefik.http.middlewares.keycloak-oauth2.forwardauth.address=http://<OAUTH2_PROXY_URL>/oauth2/auth"
|
||||
- "traefik.http.middlewares.keycloak-oauth2.forwardauth.trustForwardHeader=true"
|
||||
- "traefik.http.middlewares.keycloak-oauth2.forwardauth.authResponseHeaders=X-Auth-Request-User,X-Auth-Request-Email"
|
||||
|
||||
Reference in New Issue
Block a user