William/Personal-Rancher-Catalog
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Updated to use Traefik v2

Browse Source
This commit is contained in:
WilliamMiceli
2019-11-10 17:39:01 -05:00
parent 2bc2400f5b
commit 929a526ac2
15 changed files with 377 additions and 163 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
templates/Adminer/0/docker-compose.yml
View File

@@ -27,18 +27,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.frontend.entryPoints: http,https
traefik.frontend.headers.forceSTSHeader: true
traefik.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.frontend.headers.SSLRedirect: true
traefik.frontend.headers.STSIncludeSubdomains: true
traefik.frontend.headers.STSPreload: true
traefik.frontend.headers.STSSeconds: 15552000
traefik.frontend.passHostHeader: true
traefik.frontend.rule: Host:${TRAEFIK_HOST}
traefik.port: "8080"
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "8080"
### End Traefik Configuration
### End Web Segment
restart: on-failure
volumes:

36
templates/Ghost/0/docker-compose.yml
View File

@@ -18,18 +18,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.frontend.entryPoints: http,https
traefik.frontend.headers.forceSTSHeader: true
traefik.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.frontend.headers.SSLRedirect: true
traefik.frontend.headers.STSPreload: true
traefik.frontend.headers.STSSeconds: 15552000
traefik.frontend.passHostHeader: true
traefik.frontend.rule: Host:${TRAEFIK_HOST}
traefik.port: "2368"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "2368"
### End Traefik Configuration
restart: on-failure
volumes:
- /etc/localtime:/etc/localtime:ro # Syncronize time of container with the host system

36
templates/Gitea/0/docker-compose.yml
View File

@@ -24,18 +24,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.web.frontend.entryPoints: http,https
traefik.web.frontend.headers.forceSTSHeader: true
traefik.web.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.web.frontend.headers.SSLRedirect: true
traefik.web.frontend.headers.STSPreload: true
traefik.web.frontend.headers.STSSeconds: 15552000
traefik.web.frontend.passHostHeader: true
traefik.web.frontend.rule: Host:${TRAEFIK_HOST}
traefik.web.port: '3000'
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "3000"
### End Traefik Configuration
links:
- postgres
restart: on-failure

37
templates/Grav/0/docker-compose.yml
View File

@@ -13,19 +13,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Grav Segment
traefik.frontend.entryPoints: http,https
traefik.frontend.headers.forceSTSHeader: true
traefik.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.frontend.headers.SSLRedirect: true
traefik.frontend.headers.STSIncludeSubdomains: true
traefik.frontend.headers.STSPreload: true
traefik.frontend.headers.STSSeconds: 15552000
traefik.frontend.passHostHeader: true
traefik.frontend.rule: Host:${TRAEFIK_HOST}
traefik.port: "80"
### End Grav Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "80"
### End Traefik Configuration
restart: on-failure
volumes:
- /etc/localtime:/etc/localtime:ro # Syncronize time of container with the host system

36
templates/InvoiceNinja/0/docker-compose.yml
View File

@@ -86,18 +86,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.web.frontend.entryPoints: http,https
traefik.web.frontend.headers.forceSTSHeader: true
traefik.web.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.web.frontend.headers.SSLRedirect: true
traefik.web.frontend.headers.STSPreload: true
traefik.web.frontend.headers.STSSeconds: 15552000
traefik.web.frontend.passHostHeader: true
traefik.web.frontend.rule: Host:${TRAEFIK_HOST}
traefik.web.port: "80"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "80"
### End Traefik Configuration
io.rancher.sidekicks: invoiceninja, cron
links:
- invoiceninja

36
templates/Jellyfin/0/docker-compose.yml
View File

@@ -13,18 +13,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.frontend.entryPoints: http,https
traefik.frontend.headers.forceSTSHeader: true
traefik.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.frontend.headers.SSLRedirect: true
traefik.frontend.headers.STSPreload: true
traefik.frontend.headers.STSSeconds: 15552000
traefik.frontend.passHostHeader: true
traefik.frontend.rule: Host:${TRAEFIK_HOST}
traefik.port: "8096"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "8096"
### End Traefik Configuration
restart: on-failure
volumes:
- /etc/localtime:/etc/localtime:ro # Syncronize time of container with the host system

36
templates/Matomo/0/docker-compose.yml
View File

@@ -14,18 +14,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.frontend.entryPoints: http,https
traefik.frontend.headers.forceSTSHeader: true
traefik.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.frontend.headers.SSLRedirect: true
traefik.frontend.headers.STSPreload: true
traefik.frontend.headers.STSSeconds: 15552000
traefik.frontend.passHostHeader: true
traefik.frontend.rule: Host:${TRAEFIK_HOST}
traefik.port: "80"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "80"
### End Traefik Configuration
links:
- mysql
{{- if eq .Values.REDIS "true"}}

36
templates/Nginx/0/docker-compose.yml
View File

@@ -14,18 +14,32 @@ services:
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
{{- if .Values.TRAEFIK_HOST}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.frontend.entryPoints: http,https
traefik.frontend.headers.forceSTSHeader: true
traefik.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.frontend.headers.SSLRedirect: true
traefik.frontend.headers.STSPreload: true
traefik.frontend.headers.STSSeconds: 15552000
traefik.frontend.passHostHeader: true
traefik.frontend.rule: Host:${TRAEFIK_HOST}
traefik.port: "80"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "80"
### End Traefik Configuration
restart: on-failure
volumes:
- /etc/localtime:/etc/localtime:ro # Syncronize time of container with the host system

35
templates/OpenProject/0/docker-compose.yml
View File

@@ -28,17 +28,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.web.frontend.entryPoints: http,https
traefik.web.frontend.headers.forceSTSHeader: true
traefik.web.frontend.headers.SSLRedirect: true
traefik.web.frontend.headers.STSPreload: true
traefik.web.frontend.headers.STSSeconds: 15552000
traefik.web.frontend.passHostHeader: true
traefik.web.frontend.rule: Host:${TRAEFIK_HOST}
traefik.web.port: "80"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "80"
### End Traefik Configuration
links:
- memcached
restart: on-failure

34
templates/PHPMyAdmin/0/docker-compose.yml
View File

@@ -27,16 +27,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.web.frontend.entryPoints: http,https
traefik.web.frontend.headers.forceSTSHeader: true
traefik.web.frontend.headers.SSLRedirect: true
traefik.web.frontend.headers.STSPreload: true
traefik.web.frontend.headers.STSSeconds: 15552000
traefik.web.frontend.rule: Host:${TRAEFIK_HOST}
traefik.web.port: "80"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "80"
### End Traefik Configuration
restart: on-failure
volumes:
- /etc/localtime:/etc/localtime:ro # Syncronize time of container with the host system

36
templates/RocketChat/0/docker-compose.yml
View File

@@ -20,18 +20,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Hubot Segment
traefik.hubot.frontend.entryPoints: http,https
traefik.hubot.frontend.headers.forceSTSHeader: true
traefik.hubot.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.hubot.frontend.headers.SSLRedirect: true
traefik.hubot.frontend.headers.STSPreload: true
traefik.hubot.frontend.headers.STSSeconds: 15552000
traefik.hubot.frontend.passHostHeader: true
traefik.hubot.frontend.rule: Host:${TRAEFIK_HOST}
traefik.hubot.port: "8080"
### End Hubot Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "8080"
### End Traefik Configuration
links:
- rocketchat:rocketchat
volumes:

36
templates/Snipe-IT/0/docker-compose.yml
View File

@@ -22,18 +22,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.web.frontend.entryPoints: http,https
traefik.web.frontend.headers.forceSTSHeader: true
traefik.web.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.web.frontend.headers.SSLRedirect: true
traefik.web.frontend.headers.STSPreload: true
traefik.web.frontend.headers.STSSeconds: 15552000
traefik.web.frontend.passHostHeader: true
traefik.web.frontend.rule: Host:${TRAEFIK_HOST}
traefik.web.port: "80"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "80"
### End Traefik Configuration
links:
- mysql
restart: on-failure

37
templates/Wiki.js-v1/0/docker-compose.yml
View File

@@ -16,6 +16,7 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
traefik.enable: false
restart: on-failure
volumes:
- /etc/localtime:/etc/localtime:ro # Syncronize time of container with the host system
@@ -36,18 +37,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.web.frontend.entryPoints: http, https
traefik.web.frontend.headers.forceSTSHeader: true
traefik.web.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.web.frontend.headers.SSLRedirect: true
traefik.web.frontend.headers.STSPreload: true
traefik.web.frontend.headers.STSSeconds: 15552000
traefik.web.frontend.passHostHeader: true
traefik.web.frontend.rule: "Host:${TRAEFIK_HOST}"
traefik.web.port: "80"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "80"
### End Traefik Configuration
links:
- mongo
restart: on-failure

37
templates/WordPress/0/docker-compose.yml
View File

@@ -18,18 +18,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.web.frontend.entryPoints: http,https
traefik.web.frontend.headers.forceSTSHeader: true
traefik.web.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.web.frontend.headers.SSLRedirect: true
traefik.web.frontend.headers.STSPreload: true
traefik.web.frontend.headers.STSSeconds: 15552000
traefik.web.frontend.passHostHeader: true
traefik.web.frontend.rule: Host:${TRAEFIK_HOST}
traefik.web.port: "80"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "80"
### End Traefik Configuration
links:
- mysql
restart: on-failure
@@ -54,6 +68,7 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
traefik.enable: false
restart: on-failure
volumes:
- /etc/localtime:/etc/localtime:ro # Syncronize time of container with the host system

36
templates/sysPass/0/docker-compose.yml
View File

@@ -13,18 +13,32 @@ services:
{{- if .Values.HOST_LABEL}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}}
### Begin Traefik Configuration
traefik.enable: true
### Start Web Segment
traefik.frontend.entryPoints: http,https
traefik.frontend.headers.forceSTSHeader: true
traefik.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.frontend.headers.SSLRedirect: true
traefik.frontend.headers.STSPreload: true
traefik.frontend.headers.STSSeconds: 15552000
traefik.frontend.passHostHeader: true
traefik.frontend.rule: Host:${TRAEFIK_HOST}
traefik.port: "80"
### End Web Segment
# Routers
traefik.http.routers.{{.Stack.Name}}-router-http.entrypoints: http
traefik.http.routers.{{.Stack.Name}}-router-http.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-http.middlewares: {{.Stack.Name}}-redirectHttp
traefik.http.routers.{{.Stack.Name}}-router-http.service: {{.Stack.Name}}-service-http
traefik.http.routers.{{.Stack.Name}}-router-https.entrypoints: https
traefik.http.routers.{{.Stack.Name}}-router-https.rule: Host(`${TRAEFIK_HOST}`)
traefik.http.routers.{{.Stack.Name}}-router-https.tls: true
traefik.http.routers.{{.Stack.Name}}-router-https.tls.certresolver: letsencrypt
traefik.http.routers.{{.Stack.Name}}-router-https.middlewares: {{.Stack.Name}}-security
traefik.http.routers.{{.Stack.Name}}-router-https.service: {{.Stack.Name}}-service-http
# Middlewares
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.permanent: true
traefik.http.middlewares.{{.Stack.Name}}-redirectHttp.redirectscheme.scheme: https
traefik.http.middlewares.{{.Stack.Name}}-security.headers.forceSTSHeader: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.referrerPolicy: no-referrer # Prevents leaking of referer information
traefik.http.middlewares.{{.Stack.Name}}-security.headers.sslredirect: true # Maybe good for redundancy?
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsIncludeSubdomains: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsPreload: true
traefik.http.middlewares.{{.Stack.Name}}-security.headers.stsSeconds: "15552000"
# Services
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.passhostheader: true
traefik.http.services.{{.Stack.Name}}-service-http.loadbalancer.server.port: "80"
### End Traefik Configuration
links:
- mysql
restart: on-failure