homelab/bxl-swarm/system.stack.yaml

118 lines
3.3 KiB
YAML
Raw Normal View History

2023-01-28 22:53:34 +01:00
version: '3.7'
2023-01-27 18:20:12 +01:00
services:
traefik:
image: traefik:v2.9
command:
#- "--api.insecure=true"
- "--providers.docker=true"
- "--providers.docker.exposedbydefault=false"
- "--providers.docker.network=external"
- "--providers.docker.swarmmode=true"
- "--entrypoints.internal.address=:80"
- "--entrypoints.internalsecure.address=:443"
- "--entrypoints.internal.http.redirections.entryPoint.to=internalsecure"
- "--entrypoints.internal.http.redirections.entryPoint.scheme=https"
- "--entrypoints.internal.http.redirections.entryPoint.permanent=true"
- "--certificatesresolvers.http.acme.httpchallenge=true"
- "--certificatesresolvers.http.acme.httpchallenge.entrypoint=external"
- "--certificatesresolvers.http.acme.email=acme@bhasher.com"
- "--certificatesresolvers.http.acme.storage=acme.json"
- "--entrypoints.external.address=:81"
- "--entrypoints.externalsecure.address=:444"
- "--entrypoints.external.http.redirections.entryPoint.to=externalsecure"
- "--entrypoints.external.http.redirections.entryPoint.scheme=https"
- "--entrypoints.external.http.redirections.entryPoint.permanent=true"
2023-01-27 19:28:42 +01:00
- "--log.level=DEBUG"
2023-01-27 18:20:12 +01:00
environment:
- TZ=Europe/Paris
ports:
- "80:80"
- "443:443"
- "81:81"
- "444:444"
#- "8080:8080"
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
- type: bind
source: /mnt/nfs/traefik/acme.json
target: /acme.json
2023-01-28 22:53:34 +01:00
- type: bind
source: /mnt/nfs/traefik/rules.toml
target: /rules.toml
2023-01-27 18:20:12 +01:00
networks:
- external
deploy:
mode: replicated
replicas: 1
restart_policy:
condition: any
max_attempts: 3
portainer:
image: portainer/portainer-ce:latest
command: -H tcp://tasks.agent:9001 --tlsskipverify
ports:
- "9443:9443"
volumes:
- /mnt/nfs/portainer_data:/data:rw
- /var/run/docker.sock:/var/run/docker.sock
networks:
- external
- agent_network
deploy:
labels:
- "traefik.enable=true"
- "traefik.http.routers.portainer.rule=Host(`portainer.bxl.bhasher.com`)"
- "traefik.http.routers.portainer.entrypoints=externalsecure,internalsecure"
- "traefik.http.services.portainer.loadbalancer.server.port=9000"
- "traefik.http.routers.portainer.tls=true"
- "traefik.http.routers.portainer.tls.certresolver=http"
mode: replicated
replicas: 1
restart_policy:
condition: any
max_attempts: 3
placement:
constraints: [node.role == manager]
agent:
image: portainer/agent:latest
volumes:
- /var/run/docker.sock:/var/run/docker.sock
# - /var/lib/docker/volumes:/var/lib/docker/volumes
networks:
- agent_network
deploy:
mode: global
placement:
constraints: [node.platform.os == linux]
2023-01-28 22:53:34 +01:00
keepalived:
image: linkvt/osixia_keepalived:stable
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /usr/bin/docker:/usr/bin/docker:ro
networks:
- host
cap_add:
- NET_ADMIN
- NET_BROADCAST
- NET_RAW
environment:
- KEEPALIVED_VIRTUAL_IPS=192.168.1.219
- KEEPALIVeD_INTERFACE=eth0
deploy:
mode: global
placement:
constraints: [node.role == manager]
2023-01-27 18:20:12 +01:00
networks:
external:
external: true
agent_network:
driver: overlay
attachable: true
2023-01-28 22:53:34 +01:00
host:
external: true