Modernization mainly, removed many host port options, added Traefik rule to passHostHeader

templates/Ghost/0/docker-compose.yml

@@ -16,28 +16,20 @@ services:
       {{- if .Values.HOST_LABEL}}
       io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
       {{- end}}
-      {{- if .Values.TRAEFIK_HOST}}
       traefik.enable: true
-      traefik.frontend.rule: Host:${TRAEFIK_HOST}
-      traefik.port: "2368"
+      ### Start Web Segment
       traefik.frontend.entryPoints: http,https
       traefik.frontend.headers.forceSTSHeader: true
+      traefik.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
       traefik.frontend.headers.SSLRedirect: true
       traefik.frontend.headers.STSPreload: true
       traefik.frontend.headers.STSSeconds: 15552000
-      traefik.frontend.redirect.entryPoint: https
-      traefik.frontend.redirect.permanent: true
-      {{- else}}
-      traefik.enable: false
-      {{- end}}
-    networks:
-      - public-proxy
-    ports:
-      - "${WEB_PORT}:2368"
+      traefik.frontend.passHostHeader: true
+      traefik.frontend.rule: Host:${TRAEFIK_HOST}
+      traefik.port: "2368"
+      ### End Web Segment
     restart: on-failure
     volumes:
-      - /RancherCattleData/${DATA_DIR}/Content:/var/lib/ghost/content
-
-networks:
-  public-proxy:
-    external: true
+      - /etc/localtime:/etc/localtime:ro # Syncronize time of container with the host system
+      - /etc/timezone:/etc/timezone:ro # Syncronize timezone of container with the host system
+      - /RancherCattle/${DATA_DIR}/Content:/var/lib/ghost/content

templates/Ghost/0/rancher-compose.yml

@@ -21,16 +21,7 @@ catalog:
       label: "Public Host Domain"
       description: |
         The host that Traefik will use to provide public access.
-        Leaving this empty will disable Traefik on this stack.
       default: "subdomain.domain.tld"
-      required: false
-      type: string
-
-    - variable: "WEB_PORT"
-      label: "Local Web Port"
-      description: |
-        The port to locally access the web interface on.
-      default: "10400"
       required: true
       type: string