Traefik

evemonk/docker-compose.yml

@@ -24,73 +24,94 @@ volumes:
   diun_data: {}
 
 services:
-  nginx:
-    image: "docker.io/library/nginx:1.22.1"
-    container_name: "evemonk_nginx"
+  traefik:
+    image: "docker.io/library/traefik:v2.9.6"
+    container_name: "evemonk_traefik"
     restart: "unless-stopped"
+    command:
+      - "--logLevel=DEBUG"
+      - "--entrypoints.web.address=:80"
+      - "--entrypoints.websecure.address=:443"
+      - "--providers.docker=true"
+      - "--providers.docker.exposedByDefault=false"
+      - "--certificatesresolvers.letsencrypt.acme.tlschallenge=true"
+      - "--certificatesresolvers.letsencrypt.acme.email=igor.zubkov@gmail.com"
+      - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
+      - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
+    ports:
+      - "80:80"
+      - "443:443"
     volumes:
-      - "./nginx-evemonk.conf:/etc/nginx/conf.d/default.conf:ro"
+      - "./letsencrypt:/letsencrypt"
+      - "/var/run/docker.sock:/var/run/docker.sock:ro"
 
-  pghero_nginx:
-    image: "docker.io/library/nginx:1.22.1"
-    container_name: "evemonk_pghero_nginx"
-    restart: "unless-stopped"
-    volumes:
-      - "./evemonk-pghero-nginx/nginx.conf:/etc/nginx/conf.d/default.conf:ro"
+#  nginx:
+#    image: "docker.io/library/nginx:1.22.1"
+#    container_name: "evemonk_nginx"
+#    restart: "unless-stopped"
+#    volumes:
+#      - "./nginx-evemonk.conf:/etc/nginx/conf.d/default.conf:ro"
 
-  nginx_static:
-    image: "docker.io/library/nginx:1.22.1"
-    container_name: "evemonk_nginx_static"
-    restart: "unless-stopped"
-    volumes:
-      - "/srv/static:/var/www:ro"
-      - "./nginx-static.conf:/etc/nginx/conf.d/default.conf:ro"
+#  pghero_nginx:
+#    image: "docker.io/library/nginx:1.22.1"
+#    container_name: "evemonk_pghero_nginx"
+#    restart: "unless-stopped"
+#    volumes:
+#      - "./evemonk-pghero-nginx/nginx.conf:/etc/nginx/conf.d/default.conf:ro"
+
+#  nginx_static:
+#    image: "docker.io/library/nginx:1.22.1"
+#    container_name: "evemonk_nginx_static"
+#    restart: "unless-stopped"
+#    volumes:
+#      - "/srv/static:/var/www:ro"
+#      - "./nginx-static.conf:/etc/nginx/conf.d/default.conf:ro"
 
 #  blog:
 #    image: "biow0lf/evemonk-blog:latest"
 #    container_name: "evemonk_blog"
 #    restart: "unless-stopped"
 
-  blog:
-    image: "docker.io/library/nginx:1.22.1"
-    container_name: "evemonk_blog"
-    restart: "unless-stopped"
+#  blog:
+#    image: "docker.io/library/nginx:1.22.1"
+#    container_name: "evemonk_blog"
+#    restart: "unless-stopped"
 
 #  nginx_exporter:
 #    image: "docker.io/nginx/nginx-prometheus-exporter:0.8.0"
 #    container_name: "evemonk_nginx_exporter"
 #    restart: "unless-stopped"
 
-  https_portal:
-    image: "docker.io/steveltn/https-portal:1.23.0"
-    container_name: "evemonk_https_portal"
-    restart: "unless-stopped"
-    ports:
-      - "80:80"
-      - "443:443"
-    volumes:
-      - "https_portal:/var/lib/https-portal:rw"
-      - "https_logs:/var/log/nginx:rw"
-    environment:
-      STAGE: "production"
-      WEBSOCKET: "true"
-      LISTEN_IPV6: "true"
-      DOMAINS: "evemonk.com -> http://nginx,
-                blog.evemonk.com -> http://blog,
-                static.evemonk.com -> http://nginx_static,
-                www.evemonk.com => https://evemonk.com,
-                mail.evemonk.com,
-                irregularquiz.rpisarev.org.ua -> http://irregularquiz:5000,
-                imageproxy.evemonk.com -> http://imageproxy:8081,
-                username:[email protected] -> http://cadvisor:8080,
-                pghero.evemonk.com -> http://pghero_nginx,
-                pg-extras.evemonk.com -> http://nginx,
-                username:[email protected] -> http://nginx,
-                grafana.evemonk.com -> http://grafana:3000,
-                errbit.evemonk.com -> http://errbit:8080,
-                plausible.evemonk.com -> http://plausible:8000,
-                username:[email protected] -> http://prometheus:9090,
-                username:[email protected] -> http://alertmanager:9093"
+#  https_portal:
+#    image: "docker.io/steveltn/https-portal:1.23.0"
+#    container_name: "evemonk_https_portal"
+#    restart: "unless-stopped"
+#    ports:
+#      - "80:80"
+#      - "443:443"
+#    volumes:
+#      - "https_portal:/var/lib/https-portal:rw"
+#      - "https_logs:/var/log/nginx:rw"
+#    environment:
+#      STAGE: "production"
+#      WEBSOCKET: "true"
+#      LISTEN_IPV6: "true"
+#      DOMAINS: "evemonk.com -> http://nginx,
+#                blog.evemonk.com -> http://blog,
+#                static.evemonk.com -> http://nginx_static,
+#                www.evemonk.com => https://evemonk.com,
+#                mail.evemonk.com,
+#                irregularquiz.rpisarev.org.ua -> http://irregularquiz:5000,
+#                imageproxy.evemonk.com -> http://imageproxy:8081,
+#                username:[email protected] -> http://cadvisor:8080,
+#                pghero.evemonk.com -> http://pghero_nginx,
+#                pg-extras.evemonk.com -> http://nginx,
+#                username:[email protected] -> http://nginx,
+#                grafana.evemonk.com -> http://grafana:3000,
+#                errbit.evemonk.com -> http://errbit:8080,
+#                plausible.evemonk.com -> http://plausible:8000,
+#                username:[email protected] -> http://prometheus:9090,
+#                username:[email protected] -> http://alertmanager:9093"
 
   redis:
     image: "docker.io/library/redis:7.0.8"
@@ -120,7 +141,7 @@ services:
       - "--memcached.address=memcached:11211"
 
   postgresql:
-    image: "docker.io/library/postgres:13.9"
+    image: "docker.io/library/postgres:13.10"
     container_name: "evemonk_postgresql"
     restart: "unless-stopped"
     environment:
@@ -229,7 +250,7 @@ services:
       - "geoip_data:/usr/share/GeoIP:rw"
 
   plausible_db:
-    image: "docker.io/library/postgres:13.9"
+    image: "docker.io/library/postgres:13.10"
     container_name: "evemonk_plausible_db"
     restart: "unless-stopped"
     environment:
@@ -356,28 +377,28 @@ services:
       - "[email protected]"
 
   pghero:
-    image: "docker.io/biow0lf/evemonk-pghero:v1.1.29"
+    image: "docker.io/biow0lf/evemonk-pghero:v1.1.30"
     container_name: "evemonk_pghero"
     restart: "unless-stopped"
     env_file: "./evemonk-pghero/.env"
     read_only: true
 
   sidekiq-web-ui:
-    image: "docker.io/biow0lf/evemonk-sidekiq:v1.1.29"
+    image: "docker.io/biow0lf/evemonk-sidekiq:v1.1.30"
     container_name: "evemonk_sidekiq_web_ui"
     restart: "unless-stopped"
     env_file: "./evemonk-sidekiq-ui/.env"
     read_only: true
 
   pg-extras:
-    image: "docker.io/biow0lf/evemonk-pg-extras:v1.1.29"
+    image: "docker.io/biow0lf/evemonk-pg-extras:v1.1.30"
     container_name: "evemonk_pg_extras"
     restart: "unless-stopped"
     env_file: "./evemonk-pg-extras/.env"
     read_only: true
 
   backend:
-    image: "docker.io/biow0lf/evemonk:v0.8.22"
+    image: "docker.io/biow0lf/evemonk:v0.8.23"
     container_name: "evemonk_backend"
     restart: "unless-stopped"
 #    read_only: true
@@ -386,9 +407,14 @@ services:
     volumes:
       - "/srv/static/sde-20220716:/app/static:ro"
       - "./evemonk/airbrake.rb:/app/config/initializers/airbrake.rb:ro"
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.backend.rule=Host(`evemonk.com`)"
+      - "traefik.http.routers.backend.tls=true"
+      - "traefik.http.routers.backend.tls.certresolver=letsencrypt"
 
   sidekiq:
-    image: "docker.io/biow0lf/evemonk:v0.8.22"
+    image: "docker.io/biow0lf/evemonk:v0.8.23"
     container_name: "evemonk_sidekiq"
     restart: "unless-stopped"
 #    read_only: true
@@ -403,7 +429,7 @@ services:
       - "./evemonk/airbrake.rb:/app/config/initializers/airbrake.rb:ro"
 
   cron:
-    image: "docker.io/biow0lf/evemonk:v0.8.22"
+    image: "docker.io/biow0lf/evemonk:v0.8.23"
     container_name: "evemonk_cron"
     restart: "unless-stopped"
 #    read_only: true