update

2026-07-23 19:38:14 -04:00
parent 72272e4006
commit 84e1ead50c
283 changed files with 0 additions and 206 deletions
@@ -0,0 +1,39 @@
+services:
+  << service_name >>:
+    image: public.ecr.aws/gravitational/teleport-distroless:18.7.6
+    container_name: << container_name >>
+    ports:
+      - "<< ports_web >>:<< ports_web >>"
+      - "<< ports_ssh_proxy >>:<< ports_ssh_proxy >>"
+      - "<< ports_reverse_tunnel >>:<< ports_reverse_tunnel >>"
+      - "<< ports_auth >>:<< ports_auth >>"
+    volumes:
+      - ./config:/etc/teleport
+      - << data_host_path >>:/var/lib/teleport
+<%- if traefik_enabled %>
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.<< service_name >>.rule=HostRegexp(`^(?i)(?:[[:alnum:]]+(?:-+[[:alnum:]]+)*\\.)?<< teleport_public_host >>(?::\\d+)?$`)
+<%- if traefik_tls_enabled %>
+      - traefik.http.routers.<< service_name >>.entrypoints=<< traefik_tls_entrypoint >>
+      - traefik.http.routers.<< service_name >>.tls=true
+      - traefik.http.routers.<< service_name >>.tls.certresolver=<< traefik_tls_certresolver >>
+      - traefik.http.routers.<< service_name >>.tls.domains[0].main=<< teleport_public_host >>
+      - traefik.http.routers.<< service_name >>.tls.domains[0].sans=*.<< teleport_public_host >>
+<%- else %>
+      - traefik.http.routers.<< service_name >>.entrypoints=<< traefik_entrypoint >>
+<%- endif %>
+      - traefik.http.services.<< service_name >>.loadbalancer.server.port=<< ports_web >>
+      - traefik.http.services.<< service_name >>.loadbalancer.server.scheme=https
+<%- endif %>
+    networks:
+      - << network_name >>
+    restart: << restart_policy >>
+
+networks:
+  << network_name >>:
+<%- if network_external %>
+    external: true
+<%- else %>
+    driver: bridge
+<%- endif %>
@@ -0,0 +1,40 @@
+version: v2
+teleport:
+  nodename: << teleport_node_name >>
+  data_dir: /var/lib/teleport
+  log:
+    output: stderr
+    severity: << teleport_log_level >>
+    format:
+      output: text
+
+auth_service:
+  enabled: true
+  listen_addr: 0.0.0.0:<< ports_auth >>
+  proxy_listener_mode: multiplex
+  cluster_name: << teleport_public_host >>
+  authentication:
+    type: local
+    second_factor: << teleport_second_factor >>
+    webauthn:
+      rp_id: << teleport_public_host >>
+    connector_name: << teleport_connector_name >>
+
+ssh_service:
+  enabled: false
+
+proxy_service:
+  enabled: true
+  web_listen_addr: 0.0.0.0:<< ports_web >>
+  public_addr: ['<< teleport_public_host >>:443']
+  https_keypairs: []
+  acme: {}
+
+app_service:
+  enabled: << app_service_enabled | lower >>
+<%- if app_service_enabled %>
+  # apps:
+  #   - name: "yourapp"
+  #     uri: "http://your-app-url"
+  #     insecure_skip_verify: false
+<%- endif %>