Jan Wagner
820a2f8241
- Traefik-Routing: /admin und /v1/* auf updates-api (prioritaet 150/200) - Portfolio fängt restliches w-make.com ab (prioritaet 100) - Subdomain updates.w-make.com entfällt - Admin-HTML: Kicker aktualisiert zu w-make.com - deploy-vps.sh: updates-api wird jetzt auch gebaut und deployed
85 lines
3.2 KiB
YAML
85 lines
3.2 KiB
YAML
services:
|
|
# Das Portfolio (Next.js)
|
|
w-make-portfolio:
|
|
build: .
|
|
image: w-make-portfolio:latest
|
|
container_name: w-make-portfolio
|
|
restart: always
|
|
environment:
|
|
- UPDATES_API_URL=http://updates-api:8080
|
|
- NEXT_PUBLIC_SITE_URL=https://w-make.com
|
|
- CONTACT_TO=${CONTACT_TO:-eldov@w-make.de}
|
|
- "CONTACT_FROM=${CONTACT_FROM:-W-MAKE <eldov@w-make.de>}"
|
|
- SMTP_HOST=${SMTP_HOST:-smtp.strato.de}
|
|
- SMTP_PORT=${SMTP_PORT:-465}
|
|
- SMTP_USER=${SMTP_USER:-eldov@w-make.de}
|
|
- SMTP_PASS=${SMTP_PASS}
|
|
- INQUIRIES_DB_PATH=/data/inquiries.sqlite
|
|
volumes:
|
|
- inquiries_data:/data
|
|
expose:
|
|
- "3000"
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=proxy"
|
|
- "traefik.http.routers.w-make.rule=Host(`w-make.com`) || Host(`www.w-make.com`)"
|
|
- "traefik.http.routers.w-make.priority=100"
|
|
- "traefik.http.routers.w-make.entrypoints=websecure"
|
|
- "traefik.http.routers.w-make.tls=true"
|
|
- "traefik.http.routers.w-make.tls.certresolver=http_resolver"
|
|
- "traefik.http.routers.w-make.middlewares=default@file,crowdsec-bouncer-plugin@file"
|
|
- "traefik.http.services.w-make.loadbalancer.server.port=3000"
|
|
networks:
|
|
- proxy
|
|
|
|
updates-api:
|
|
build:
|
|
context: ./services/updates-api
|
|
image: w-make-updates-api:latest
|
|
container_name: w-make-updates-api
|
|
restart: unless-stopped
|
|
environment:
|
|
- PORT=8080
|
|
- HOSTNAME=0.0.0.0
|
|
- UPDATES_DB_PATH=/data/updates.sqlite
|
|
- UPDATES_ADMIN_TOKEN=${UPDATES_ADMIN_TOKEN:?UPDATES_ADMIN_TOKEN must be set}
|
|
volumes:
|
|
- updates_data:/data
|
|
expose:
|
|
- "8080"
|
|
healthcheck:
|
|
test: ["CMD", "node", "-e", "require('http').get('http://127.0.0.1:8080/healthz', r => process.exit(r.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=proxy"
|
|
# Öffentliche API-Routen (hohe Priorität, before portfolio)
|
|
- "traefik.http.routers.w-make-api.rule=Host(`w-make.com`) && (PathPrefix(`/v1`) || PathPrefix(`/feed.xml`))"
|
|
- "traefik.http.routers.w-make-api.priority=150"
|
|
- "traefik.http.routers.w-make-api.entrypoints=websecure"
|
|
- "traefik.http.routers.w-make-api.tls=true"
|
|
- "traefik.http.routers.w-make-api.tls.certresolver=http_resolver"
|
|
- "traefik.http.routers.w-make-api.middlewares=default@file,crowdsec-bouncer-plugin@file"
|
|
- "traefik.http.services.w-make-updates.loadbalancer.server.port=8080"
|
|
# Admin-UI (höchste Priorität, Authelia-Schutz)
|
|
- "traefik.http.routers.w-make-admin.rule=Host(`w-make.com`) && PathPrefix(`/admin`)"
|
|
- "traefik.http.routers.w-make-admin.priority=200"
|
|
- "traefik.http.routers.w-make-admin.entrypoints=websecure"
|
|
- "traefik.http.routers.w-make-admin.tls=true"
|
|
- "traefik.http.routers.w-make-admin.tls.certresolver=http_resolver"
|
|
- "traefik.http.routers.w-make-admin.middlewares=default@file,crowdsec-bouncer-plugin@file"
|
|
networks:
|
|
- proxy
|
|
|
|
volumes:
|
|
updates_data:
|
|
inquiries_data:
|
|
|
|
networks:
|
|
proxy:
|
|
external: true
|