miker/Compose-Files
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

migrate

Browse Source
This commit is contained in:
Mike McFetridge
2026-07-20 09:23:17 -04:00
parent c1315882da
commit 72272e4006
3179 changed files with 562960 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Docker/traefik/files/.env
+31
View File
@@ -0,0 +1,31 @@
# Traefik DNS provider credentials
<%- if traefik_tls_enabled %>
<%- if traefik_tls_certresolver == 'cloudflare' %>
CF_DNS_API_TOKEN=<< traefik_tls_acme_token >>
<%- elif traefik_tls_certresolver == 'porkbun' %>
PORKBUN_API_KEY=<< traefik_tls_acme_token >>
PORKBUN_SECRET_API_KEY=<< traefik_tls_acme_secret_key >>
<%- elif traefik_tls_certresolver == 'route53' %>
AWS_ACCESS_KEY_ID=<< traefik_tls_acme_token >>
AWS_SECRET_ACCESS_KEY=<< traefik_tls_acme_secret_key >>
<%- elif traefik_tls_certresolver == 'digitalocean' %>
DO_AUTH_TOKEN=<< traefik_tls_acme_token >>
<%- elif traefik_tls_certresolver == 'godaddy' %>
GODADDY_API_KEY=<< traefik_tls_acme_token >>
GODADDY_API_SECRET=<< traefik_tls_acme_secret_key >>
<%- elif traefik_tls_certresolver == 'azure' %>
AZURE_CLIENT_ID=<< traefik_tls_acme_token >>
AZURE_CLIENT_SECRET=<< traefik_tls_acme_secret_key >>
<%- elif traefik_tls_certresolver == 'namecheap' %>
NAMECHEAP_API_KEY=<< traefik_tls_acme_token >>
NAMECHEAP_API_USER=<< traefik_tls_acme_username >>
<%- elif traefik_tls_certresolver == 'netcup' %>
NETCUP_CUSTOMER_NUMBER=<< traefik_tls_acme_customer_number >>
NETCUP_API_KEY=<< traefik_tls_acme_token >>
NETCUP_API_PASSWORD=<< traefik_tls_acme_secret_key >>
<%- elif traefik_tls_certresolver == 'ovh' %>
OVH_APPLICATION_KEY=<< traefik_tls_acme_token >>
OVH_APPLICATION_SECRET=<< traefik_tls_acme_secret_key >>
OVH_CONSUMER_KEY=<< traefik_tls_acme_consumer_key >>
<%- endif %>
<%- endif %>
Docker/traefik/files/compose.yaml
+139
View File
@@ -0,0 +1,139 @@
---
services:
traefik:
image: docker.io/library/traefik:v3.6.15
security_opt:
- no-new-privileges:true
command:
- "--global.checkNewVersion=false"
- "--global.sendAnonymousUsage=false"
<%- if container_loglevel %>
- "--log.level=<< container_loglevel >>"
<%- endif %>
- "--ping=true"
- "--ping.entryPoint=ping"
<%- if accesslog_enabled %>
- "--accesslog=true"
<%- endif %>
<%- if dashboard_enabled %>
- "--api.dashboard=true"
- "--api.insecure=true"
<%- endif %>
<%- if prometheus_enabled %>
- "--metrics.prometheus=true"
- "--metrics.prometheus.entryPoint=metrics"
- "--metrics.prometheus.addRoutersLabels=true"
<%- endif %>
- "--entrypoints.ping.address=:8082"
<%- if prometheus_enabled %>
- "--entrypoints.metrics.address=:9090"
<%- endif %>
- "--entrypoints.web.address=:80"
- "--entrypoints.web.http.encodedCharacters.allowEncodedSlash=true"
<%- if traefik_tls_enabled and traefik_tls_redirect %>
- "--entrypoints.web.http.redirections.entryPoint.to=websecure"
- "--entrypoints.web.http.redirections.entryPoint.scheme=https"
<%- endif %>
<%- if traefik_tls_enabled %>
- "--entrypoints.websecure.address=:443"
- "--entrypoints.websecure.http.encodedCharacters.allowEncodedSlash=true"
- "--certificatesresolvers.<< traefik_tls_certresolver >>.acme.email=<< traefik_tls_acme_email >>"
- "--certificatesresolvers.<< traefik_tls_certresolver >>.acme.caServer=https://acme-v02.api.letsencrypt.org/directory"
- "--certificatesresolvers.<< traefik_tls_certresolver >>.acme.storage=/var/traefik/certs/acme.json"
- "--certificatesresolvers.<< traefik_tls_certresolver >>.acme.dnsChallenge.provider=<< traefik_tls_certresolver >>"
- "--certificatesresolvers.<< traefik_tls_certresolver >>.acme.dnsChallenge.resolvers=1.1.1.1:53,8.8.8.8:53"
<%- endif %>
<%- if traefik_tls_secure_ciphers %>
- "--tls.options.default.cipherSuites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"
<%- endif %>
<%- if traefik_tls_skipverify %>
- "--serversTransport.insecureSkipVerify=true"
<%- endif %>
- "--providers.docker=true"
- "--providers.docker.exposedByDefault=false"
- "--providers.docker.network=<< traefik_network >>"
ports:
- "<< ports_http >>:80"
- "<< ports_https >>:443"
<%- if dashboard_enabled %>
- "<< ports_dashboard >>:8080"
<%- endif %>
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
<%- if volume_mode == 'mount' %>
- << volume_mount_path >>:/var/traefik/certs/:rw
<%- elif volume_mode == 'local' or volume_mode == 'nfs' %>
- traefik_certs:/var/traefik/certs/:rw
<%- endif %>
environment:
- TZ=<< container_timezone >>
<%- if traefik_tls_enabled %>
<%- if traefik_tls_certresolver == 'cloudflare' %>
- CF_DNS_API_TOKEN=${CF_DNS_API_TOKEN}
<%- elif traefik_tls_certresolver == 'porkbun' %>
- PORKBUN_API_KEY=${PORKBUN_API_KEY}
- PORKBUN_SECRET_API_KEY=${PORKBUN_SECRET_API_KEY}
<%- elif traefik_tls_certresolver == 'route53' %>
- AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
- AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
- AWS_REGION=<< traefik_tls_acme_region >>
<%- elif traefik_tls_certresolver == 'digitalocean' %>
- DO_AUTH_TOKEN=${DO_AUTH_TOKEN}
<%- elif traefik_tls_certresolver == 'godaddy' %>
- GODADDY_API_KEY=${GODADDY_API_KEY}
- GODADDY_API_SECRET=${GODADDY_API_SECRET}
<%- elif traefik_tls_certresolver == 'azure' %>
- AZURE_CLIENT_ID=${AZURE_CLIENT_ID}
- AZURE_CLIENT_SECRET=${AZURE_CLIENT_SECRET}
- AZURE_TENANT_ID=<< traefik_tls_acme_tenant_id >>
- AZURE_SUBSCRIPTION_ID=<< traefik_tls_acme_subscription_id >>
- AZURE_RESOURCE_GROUP=<< traefik_tls_acme_resource_group >>
<%- elif traefik_tls_certresolver == 'namecheap' %>
- NAMECHEAP_API_KEY=${NAMECHEAP_API_KEY}
- NAMECHEAP_API_USER=${NAMECHEAP_API_USER}
<%- elif traefik_tls_certresolver == 'netcup' %>
- NETCUP_CUSTOMER_NUMBER=${NETCUP_CUSTOMER_NUMBER}
- NETCUP_API_KEY=${NETCUP_API_KEY}
- NETCUP_API_PASSWORD=${NETCUP_API_PASSWORD}
<%- elif traefik_tls_certresolver == 'ovh' %>
- OVH_ENDPOINT=<< traefik_tls_acme_endpoint >>
- OVH_APPLICATION_KEY=${OVH_APPLICATION_KEY}
- OVH_APPLICATION_SECRET=${OVH_APPLICATION_SECRET}
- OVH_CONSUMER_KEY=${OVH_CONSUMER_KEY}
<%- endif %>
<%- endif %>
healthcheck:
test: ["CMD", "wget", "--spider", "-q", "http://127.0.0.1:8082/ping"]
interval: 30s
timeout: 5s
retries: 3
start_period: 10s
networks:
- << traefik_network >>
restart: << restart_policy >>
networks:
<< traefik_network >>:
<%- if traefik_network_external %>
external: true
<%- else %>
driver: bridge
name: << traefik_network >>
<%- endif %>
<%- if volume_mode == 'local' %>
volumes:
traefik_certs:
driver: local
<%- elif volume_mode == 'nfs' %>
volumes:
traefik_certs:
driver: local
driver_opts:
type: nfs
o: addr=<< volume_nfs_server >>,nfsvers=4,<< volume_nfs_options >>
device: ":<< volume_nfs_path >>"
<%- endif %>
Docker/traefik/template.json
+417
View File
@@ -0,0 +1,417 @@
{
"slug": "traefik",
"kind": "compose",
"metadata": {
"name": "Traefik",
"description": "Modern HTTP reverse proxy and load balancer designed for microservices. Provides automatic service discovery, Let's Encrypt TLS, and a built-in dashboard.",
"tags": [
"reverse-proxy"
],
"icon": {
"provider": "devicon",
"id": "traefikproxy",
"color": "sky"
},
"draft": false,
"version": {
"name": "v3.6.15",
"source_dep_name": "docker.io/library/traefik",
"source_dep_version": "v3.6.15"
}
},
"variables": [
{
"name": "general",
"title": "General",
"items": [
{
"name": "container_timezone",
"type": "str",
"title": "Container Timezone",
"required": true,
"default": "UTC",
"config": {
"placeholder": "UTC"
}
},
{
"name": "container_loglevel",
"type": "enum",
"title": "Log Level",
"required": false,
"config": {
"options": [
"debug",
"info",
"warn",
"error"
]
}
},
{
"name": "restart_policy",
"type": "enum",
"title": "Restart Policy",
"required": true,
"default": "unless-stopped",
"config": {
"options": [
"unless-stopped",
"always",
"on-failure",
"no"
]
}
}
]
},
{
"name": "ports",
"title": "Ports",
"items": [
{
"name": "ports_dashboard",
"type": "int",
"title": "Dashboard Port",
"required": true,
"default": 8080,
"description": "Dashboard port (external)",
"config": {
"placeholder": "8080"
},
"needs": [
"dashboard_enabled=true"
]
},
{
"name": "ports_http",
"type": "str",
"title": "HTTP Port",
"required": false,
"default": 80,
"config": {
"placeholder": "80"
}
},
{
"name": "ports_https",
"type": "str",
"title": "HTTPS Port",
"required": false,
"default": 443,
"config": {
"placeholder": "443"
}
}
]
},
{
"name": "traefik",
"title": "Traefik",
"items": [
{
"name": "traefik_network",
"type": "str",
"title": "Network",
"required": true,
"default": "proxy",
"config": {
"placeholder": "proxy"
}
},
{
"name": "traefik_network_external",
"type": "bool",
"title": "External Network",
"required": false,
"default": false
},
{
"name": "traefik_tls_enabled",
"type": "bool",
"title": "TLS",
"required": false,
"default": false
},
{
"name": "traefik_tls_certresolver",
"type": "enum",
"title": "DNS Provider",
"required": true,
"default": "cloudflare",
"config": {
"options": [
"cloudflare",
"porkbun",
"godaddy",
"digitalocean",
"route53",
"azure",
"namecheap",
"netcup",
"ovh"
]
},
"needs": [
"traefik_tls_enabled=true"
]
},
{
"name": "traefik_tls_acme_email",
"type": "str",
"title": "ACME Email",
"required": true,
"needs": [
"traefik_tls_enabled=true"
]
},
{
"name": "traefik_tls_acme_endpoint",
"type": "str",
"title": "OVH Endpoint",
"required": false,
"default": "ovh-eu",
"config": {
"placeholder": "ovh-eu"
},
"needs": [
"traefik_tls_enabled=true",
"traefik_tls_certresolver=ovh"
]
},
{
"name": "traefik_tls_acme_region",
"type": "str",
"title": "AWS Region",
"required": true,
"default": "us-east-1",
"config": {
"placeholder": "us-east-1"
},
"needs": [
"traefik_tls_enabled=true",
"traefik_tls_certresolver=route53"
]
},
{
"name": "traefik_tls_acme_resource_group",
"type": "str",
"title": "Azure Group",
"required": true,
"needs": [
"traefik_tls_enabled=true",
"traefik_tls_certresolver=azure"
]
},
{
"name": "traefik_tls_acme_customer_number",
"type": "str",
"title": "Customer Number",
"required": true,
"description": "Netcup customer number used for the ACME DNS challenge.",
"needs": [
"traefik_tls_enabled=true",
"traefik_tls_certresolver=netcup"
],
"config": {
"placeholder": "123456"
}
},
{
"name": "traefik_tls_acme_token",
"type": "secret",
"title": "API Token",
"required": true,
"needs": [
"traefik_tls_enabled=true",
"traefik_tls_certresolver=cloudflare,digitalocean,godaddy,namecheap,ovh,porkbun,netcup"
]
},
{
"name": "traefik_tls_acme_secret_key",
"type": "secret",
"title": "Secret Key",
"required": true,
"needs": [
"traefik_tls_enabled=true",
"traefik_tls_certresolver=azure,godaddy,ovh,porkbun,route53,netcup"
]
},
{
"name": "traefik_tls_acme_subscription_id",
"type": "str",
"title": "Subscription ID",
"required": true,
"needs": [
"traefik_tls_enabled=true",
"traefik_tls_certresolver=azure"
]
},
{
"name": "traefik_tls_acme_tenant_id",
"type": "str",
"title": "Tenant ID",
"required": true,
"needs": [
"traefik_tls_enabled=true",
"traefik_tls_certresolver=azure"
]
},
{
"name": "traefik_tls_acme_username",
"type": "str",
"title": "Username",
"required": true,
"needs": [
"traefik_tls_enabled=true",
"traefik_tls_certresolver=namecheap"
]
},
{
"name": "traefik_tls_acme_consumer_key",
"type": "secret",
"title": "Consumer Key",
"required": true,
"needs": [
"traefik_tls_enabled=true",
"traefik_tls_certresolver=ovh"
]
},
{
"name": "traefik_tls_redirect",
"type": "bool",
"title": "HTTP Redirect",
"required": false,
"default": true,
"description": "Redirect all HTTP traffic to HTTPS",
"needs": [
"traefik_tls_enabled=true"
]
},
{
"name": "traefik_tls_secure_ciphers",
"type": "bool",
"title": "Strict Ciphers",
"required": false,
"default": false,
"description": "Enable strict cipher suites (recommended)",
"needs": [
"traefik_tls_enabled=true"
]
},
{
"name": "traefik_tls_skipverify",
"type": "bool",
"title": "TLS Verify",
"required": false,
"default": false,
"description": "Skip TLS verification for backend servers",
"needs": [
"traefik_tls_enabled=true"
]
},
{
"name": "accesslog_enabled",
"type": "bool",
"title": "Access Log",
"required": false,
"default": false
},
{
"name": "dashboard_enabled",
"type": "bool",
"title": "Dashboard",
"required": false,
"default": false
},
{
"name": "prometheus_enabled",
"type": "bool",
"title": "Prometheus",
"required": false,
"default": false
},
{
"name": "security_enabled",
"type": "bool",
"title": "Security Headers",
"required": false,
"default": true,
"description": "Create production-ready security headers middleware"
}
]
},
{
"name": "volume",
"title": "Volume",
"items": [
{
"name": "volume_mode",
"type": "enum",
"title": "Volume Mode",
"required": true,
"default": "local",
"config": {
"options": [
"local",
"mount",
"nfs"
]
}
},
{
"name": "volume_mount_path",
"type": "str",
"title": "Volume Mount Path",
"required": true,
"default": "/data",
"config": {
"placeholder": "/data"
},
"needs": [
"volume_mode=mount"
]
},
{
"name": "volume_nfs_server",
"type": "str",
"title": "Volume Nfs Server",
"required": true,
"default": "NFS_SERVER",
"config": {
"placeholder": "NFS_SERVER"
},
"needs": [
"volume_mode=nfs"
]
},
{
"name": "volume_nfs_path",
"type": "str",
"title": "Volume Nfs Path",
"required": true,
"default": "/export",
"config": {
"placeholder": "/export"
},
"needs": [
"volume_mode=nfs"
]
},
{
"name": "volume_nfs_options",
"type": "str",
"title": "Volume Nfs Options",
"required": true,
"default": "rw,nolock,soft",
"config": {
"placeholder": "rw,nolock,soft"
},
"needs": [
"volume_mode=nfs"
]
}
]
}
]
}