docker-compose.override.yml

version: '3.8'

services:
  proxy:
    image: traefik:v2.2
    restart: unless-stopped
    ports:
      - 80:80
      - 443:443
    networks:
      - proxy
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./compose/traefik/config:/etc/traefik/config
      - acme:/etc/acme
    command: 
      - --providers.docker=true
      - --providers.file.directory=/etc/traefik/config
      - --api.dashboard=true
      - --log.level=WARN
      - --entrypoints.web.address=:80
      - --entrypoints.websecure.address=:443
      - --certificatesresolvers.letsencrypt.acme.email=${EMAIL}
      - --certificatesresolvers.letsencrypt.acme.tlschallenge=true
      - --certificatesresolvers.letsencrypt.acme.storage=/etc/acme/acme.json
      # Uncomment following line to test letsencrypt certificate issuing.
      # - --certificatesresolvers.letsencrypt.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory

    labels:
      - "traefik.http.routers.dashboard.rule=Host(`student.kaist.ac.kr`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))"
      - "traefik.http.routers.dashboard.service=api@internal"
      - "traefik.http.routers.dashboard.middlewares=auth@docker"
      - "traefik.http.routers.dashboard.tls=yes"
      - "traefik.http.routers.dashboard.tls.certResolver=letsencrypt"
      - "traefik.http.middlewares.auth.basicauth.users=kaistua:$$2y$$05$$VnWsC5H/qZU1Jx4QiaeP4.pVR3X4iPHbk5gRnl4v3x1WhC2tLelBO"

networks:
  proxy:
    name: proxy_default

volumes:
  acme: {}